dscf-marketplace 0.1.8 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9bbdcc2258fee7a63ff11ba8c87e73a47923e8dbb6d9737e55d6e3e9d7002822
-  data.tar.gz: 184a09306eb3c9de61c2e9edc82cdd49ed735e7bf91acae09b5ace7cd7e9f3a1
+  metadata.gz: df198307c66d8356b9c6087b33670c4658047882587a996d835cd993688f1928
+  data.tar.gz: 5e020f16c458e74f374462d732c6fe746e5cd122489b4b3c5bff026a9845bd1b
 SHA512:
-  metadata.gz: 503e6dcdb6f209cbc278219572beb1deadbbeff8910e979914b4cd316e176528bc91130b4917bc874e3de36afb9e0f4c56978ecc3aa0dd54f4e175ee8cd2a071
-  data.tar.gz: e2790cb38d3a76cff511631c8b4fc7ae4b277e8faa2459241379ba3127438b242449438d363e5976dda72aa90a4d3b354e091ebf3d699bf4afb3e48a504689ef
+  metadata.gz: 5a504501c9c8235f1a634e8f0b62c527c1383c87fa36f08c79e2f89e22c4ced206b63bbc80330eb11a44e141dea08ebae506a97f2dcb565ad4dbd7ab58544405
+  data.tar.gz: df8f9d49b2d9a47cdf68a87e12d07497d8ccffa08a5ee9678982ba5fbc468924a24245f844dfa8a1976f6cda468f91b022cd367a9ef573cbcda7a1eb19d242b6

data/app/controllers/dscf/marketplace/application_controller.rb

@@ -1,6 +1,8 @@
 module Dscf
   module Marketplace
     class ApplicationController < ActionController::API
+      include Dscf::Core::JsonResponse
+      include Dscf::Core::Authenticatable
     end
   end
 end

data/app/controllers/dscf/marketplace/categories_controller.rb

@@ -0,0 +1,26 @@
+module Dscf
+  module Marketplace
+    class CategoriesController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:category).permit(:name, :description, :parent_id)
+      end
+
+      def eager_loaded_associations
+        [ :parent, :subcategories, :products ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :parent ],
+          show: [ :parent, :subcategories, :products ],
+          create: [ :parent ],
+          update: [ :parent ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/delivery_order_items_controller.rb

@@ -0,0 +1,64 @@
+module Dscf
+  module Marketplace
+    class DeliveryOrderItemsController < ApplicationController
+      include Dscf::Core::Common
+
+      def receiver_confirm
+        @obj = find_record
+        if @obj.receiver_confirm!(params[:confirmed_quantity], params[:notes], current_user&.id)
+          render_success("delivery_order_items.success.receiver_confirmed", data: @obj)
+        else
+          render_error("delivery_order_items.errors.receiver_confirm_failed")
+        end
+      end
+
+      def report_issue
+        @obj = find_record
+        issue_type = params[:issue_type]
+        quantity = params[:quantity]
+        description = params[:description]
+
+        if @obj.report_issue!(issue_type, quantity, description, current_user&.id)
+          render_success("delivery_order_items.success.issue_reported", data: @obj)
+        else
+          render_error("delivery_order_items.errors.report_issue_failed")
+        end
+      end
+
+      def dispute_delivery
+        @obj = find_record
+        reason = params[:reason]
+
+        if @obj.dispute_delivery!(reason, current_user&.id)
+          render_success("delivery_order_items.success.delivery_disputed", data: @obj)
+        else
+          render_error("delivery_order_items.errors.dispute_delivery_failed")
+        end
+      end
+
+      private
+
+      def model_params
+        params.require(:delivery_order_item).permit(
+          :delivery_order_id, :order_item_id, :pickup_address_id, :dropoff_address_id,
+          :quantity, :status, :pickup_verified_quantity, :dropoff_verified_quantity,
+          :damaged_quantity, :missing_quantity, :receiver_confirmed_by,
+          :receiver_confirmed_at, :receiver_notes, :handoff_checklist_completed
+        )
+      end
+
+      def eager_loaded_associations
+        [ :delivery_order, :order_item, :pickup_address, :dropoff_address ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :delivery_order, :order_item ],
+          show: [ :delivery_order, :order_item, :pickup_address, :dropoff_address ],
+          create: [ :delivery_order, :order_item ],
+          update: [ :delivery_order, :order_item ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/delivery_orders_controller.rb

@@ -0,0 +1,72 @@
+module Dscf
+  module Marketplace
+    class DeliveryOrdersController < ApplicationController
+      include Dscf::Core::Common
+
+      def index
+        @objs = DeliveryOrder.all
+        render_success("delivery_orders.index.success", data: @objs, serializer_options: {include: default_serializer_includes[:index]})
+      end
+
+      def pickup
+        @obj = find_record
+        if @obj.pickup!
+          render_success("delivery_orders.success.picked_up", data: @obj)
+        else
+          render_error("delivery_orders.errors.pickup_failed")
+        end
+      end
+
+      def start_delivery
+        @obj = find_record
+        if @obj.start_delivery!
+          render_success("delivery_orders.success.delivery_started", data: @obj)
+        else
+          render_error("delivery_orders.errors.start_delivery_failed")
+        end
+      end
+
+      def complete_delivery
+        @obj = find_record
+        if @obj.complete_delivery!
+          render_success("delivery_orders.success.delivery_completed", data: @obj)
+        else
+          render_error("delivery_orders.errors.complete_delivery_failed")
+        end
+      end
+
+      def mark_failed
+        @obj = find_record
+        reason = params[:reason]
+        if @obj.mark_failed!(reason)
+          render_success("delivery_orders.success.marked_failed", data: @obj)
+        else
+          render_error("delivery_orders.errors.mark_failed_failed")
+        end
+      end
+
+      private
+
+      def model_params
+        params.require(:delivery_order).permit(
+          :driver_id, :pickup_address_id, :delivery_vehicle_id, :status,
+          :vehicle_type, :estimated_delivery_price, :actual_delivery_price,
+          :estimated_delivery_time, :actual_delivery_time, :delivery_notes
+        )
+      end
+
+      def eager_loaded_associations
+        [ :driver, :pickup_address, :delivery_vehicle, :delivery_order_items, :marketplace_orders ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :driver, :pickup_address, :delivery_vehicle ],
+          show: [ :driver, :pickup_address, :delivery_vehicle, :delivery_order_items, :marketplace_orders ],
+          create: [ :driver, :pickup_address, :delivery_vehicle ],
+          update: [ :driver, :pickup_address, :delivery_vehicle ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/delivery_vehicles_controller.rb

@@ -0,0 +1,28 @@
+module Dscf
+  module Marketplace
+    class DeliveryVehiclesController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:delivery_vehicle).permit(
+          :driver_id, :plate_number, :vehicle_type, :year, :brand, :model, :color
+        )
+      end
+
+      def eager_loaded_associations
+        [ :driver, :delivery_orders ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :driver ],
+          show: [ :driver, :delivery_orders ],
+          create: [ :driver ],
+          update: [ :driver ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/listings_controller.rb

@@ -0,0 +1,55 @@
+module Dscf
+  module Marketplace
+    class ListingsController < ApplicationController
+      include Dscf::Core::Common
+
+      def activate
+        @obj = find_record
+        if @obj.update(status: :active)
+          render_success("listings.success.activated", data: @obj)
+        else
+          render_error("listings.errors.activate_failed")
+        end
+      end
+
+      def pause
+        @obj = find_record
+        if @obj.update(status: :paused)
+          render_success("listings.success.paused", data: @obj)
+        else
+          render_error("listings.errors.pause_failed")
+        end
+      end
+
+      def sold_out
+        @obj = find_record
+        if @obj.update(status: :sold_out)
+          render_success("listings.success.sold_out", data: @obj)
+        else
+          render_error("listings.errors.sold_out_failed")
+        end
+      end
+
+      private
+
+      def model_params
+        params.require(:listing).permit(
+          :business_id, :supplier_product_id, :price, :quantity, :status
+        )
+      end
+
+      def eager_loaded_associations
+        [ :business, :supplier_product, :order_items ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :business, :supplier_product ],
+          show: [ :business, :supplier_product, :order_items ],
+          create: [ :business, :supplier_product ],
+          update: [ :business, :supplier_product ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/order_items_controller.rb

@@ -0,0 +1,29 @@
+module Dscf
+  module Marketplace
+    class OrderItemsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:order_item).permit(
+          :order_id, :quotation_item_id, :listing_id,
+          :product_id, :unit_id, :quantity, :unit_price, :status
+        )
+      end
+
+      def eager_loaded_associations
+        [ :order, :quotation_item, :listing, :product, :unit ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :product, :unit ],
+          show: [ :order, :quotation_item, :listing, :product, :unit ],
+          create: [ :product, :unit ],
+          update: [ :product, :unit ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/orders_controller.rb

@@ -0,0 +1,58 @@
+module Dscf
+  module Marketplace
+    class OrdersController < ApplicationController
+      include Dscf::Core::Common
+
+      def confirm
+        @obj = find_record
+        if @obj.confirm!
+          render_success("orders.success.confirmed", data: @obj)
+        else
+          render_error("orders.errors.confirm_failed")
+        end
+      end
+
+      def cancel
+        @obj = find_record
+        if @obj.update(status: :cancelled)
+          @obj.order_items.update_all(status: OrderItem.statuses[:cancelled])
+          render_success("orders.success.cancelled", data: @obj)
+        else
+          render_error("orders.errors.cancel_failed")
+        end
+      end
+
+      def complete
+        @obj = find_record
+        if @obj.can_be_completed? && @obj.update(status: :completed)
+          @obj.order_items.update_all(status: OrderItem.statuses[:completed])
+          render_success("orders.success.completed", data: @obj)
+        else
+          render_error("orders.errors.complete_failed")
+        end
+      end
+
+      private
+
+      def model_params
+        params.require(:order).permit(
+          :quotation_id, :listing_id, :user_id, :delivery_order_id,
+          :order_type, :status, :fulfillment_type
+        )
+      end
+
+      def eager_loaded_associations
+        [ :quotation, :listing, :user, :delivery_order, :order_items ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :user, :quotation, :listing ],
+          show: [ :user, :quotation, :listing, :delivery_order, :order_items ],
+          create: [ :user, :quotation, :listing ],
+          update: [ :user, :quotation, :listing ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/products_controller.rb

@@ -0,0 +1,30 @@
+module Dscf
+  module Marketplace
+    class ProductsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:product).permit(
+          :sku, :name, :description, :category_id, :unit_id,
+          :base_price, :base_quantity, :business_only,
+          :thumbnail, images: []
+        )
+      end
+
+      def eager_loaded_associations
+        [ :category, :unit, :supplier_products ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :category, :unit ],
+          show: [ :category, :unit, :supplier_products ],
+          create: [ :category, :unit ],
+          update: [ :category, :unit ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/quotation_items_controller.rb

@@ -0,0 +1,28 @@
+module Dscf
+  module Marketplace
+    class QuotationItemsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:quotation_item).permit(
+          :quotation_id, :rfq_item_id, :product_id, :unit_id, :quantity, :unit_price
+        )
+      end
+
+      def eager_loaded_associations
+        [ :quotation, :rfq_item, :product, :unit ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :quotation, :rfq_item, :product, :unit ],
+          show: [ :quotation, :rfq_item, :product, :unit ],
+          create: [ :quotation, :rfq_item, :product, :unit ],
+          update: [ :quotation, :rfq_item, :product, :unit ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/quotations_controller.rb

@@ -0,0 +1,56 @@
+module Dscf
+  module Marketplace
+    class QuotationsController < ApplicationController
+      include Dscf::Core::Common
+
+      def accept
+        @obj = find_record
+        if @obj.accept!
+          render_success("quotations.success.accepted", data: @obj)
+        else
+          render_error("quotations.errors.accept_failed")
+        end
+      end
+
+      def reject
+        @obj = find_record
+        if @obj.reject!
+          render_success("quotations.success.rejected", data: @obj)
+        else
+          render_error("quotations.errors.reject_failed")
+        end
+      end
+
+      def send_quotation
+        @obj = find_record
+        if @obj.send_quotation!
+          render_success("quotations.success.sent", data: @obj)
+        else
+          render_error("quotations.errors.send_failed")
+        end
+      end
+
+      private
+
+      def model_params
+        params.require(:quotation).permit(
+          :request_for_quotation_id, :business_id, :total_price,
+          :delivery_date, :valid_until, :status, :notes
+        )
+      end
+
+      def eager_loaded_associations
+        [ :request_for_quotation, :business, :quotation_items, :order ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :request_for_quotation, :business ],
+          show: [ :request_for_quotation, :business, :quotation_items, :order ],
+          create: [ :request_for_quotation, :business ],
+          update: [ :request_for_quotation, :business ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/request_for_quotations_controller.rb

@@ -0,0 +1,46 @@
+module Dscf
+  module Marketplace
+    class RequestForQuotationsController < ApplicationController
+      include Dscf::Core::Common
+
+      def send_rfq
+        @obj = find_record
+        if @obj.draft? && @obj.update(status: :sent)
+          render_success("request_for_quotations.success.sent", data: @obj)
+        else
+          render_error("request_for_quotations.errors.send_failed")
+        end
+      end
+
+      def close
+        @obj = find_record
+        if (@obj.sent? || @obj.responded?) && @obj.update(status: :closed)
+          render_success("request_for_quotations.success.closed", data: @obj)
+        else
+          render_error("request_for_quotations.errors.close_failed")
+        end
+      end
+
+      private
+
+      def model_params
+        params.require(:request_for_quotation).permit(
+          :user_id, :selected_quotation_id, :status, :notes
+        )
+      end
+
+      def eager_loaded_associations
+        [ :user, :selected_quotation, :rfq_items, :quotations ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :user ],
+          show: [ :user, :selected_quotation, :rfq_items, :quotations ],
+          create: [ :user ],
+          update: [ :user ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/rfq_items_controller.rb

@@ -0,0 +1,28 @@
+module Dscf
+  module Marketplace
+    class RfqItemsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:rfq_item).permit(
+          :request_for_quotation_id, :product_id, :unit_id, :quantity, :notes
+        )
+      end
+
+      def eager_loaded_associations
+        [ :request_for_quotation, :product, :unit, :quotation_items ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :request_for_quotation, :product, :unit ],
+          show: [ :request_for_quotation, :product, :unit, :quotation_items ],
+          create: [ :request_for_quotation, :product, :unit ],
+          update: [ :request_for_quotation, :product, :unit ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/supplier_products_controller.rb

@@ -0,0 +1,29 @@
+module Dscf
+  module Marketplace
+    class SupplierProductsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:supplier_product).permit(
+          :business_id, :product_id, :supplier_price, :available_quantity,
+          :minimum_order_quantity, :status
+        )
+      end
+
+      def eager_loaded_associations
+        [ :business, :product, :listings ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :business, :product ],
+          show: [ :business, :product, :listings ],
+          create: [ :business, :product ],
+          update: [ :business, :product ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/unit_conversions_controller.rb

@@ -0,0 +1,28 @@
+module Dscf
+  module Marketplace
+    class UnitConversionsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:unit_conversion).permit(
+          :from_unit_id, :to_unit_id, :conversion_factor, :notes
+        )
+      end
+
+      def eager_loaded_associations
+        [ :from_unit, :to_unit ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :from_unit, :to_unit ],
+          show: [ :from_unit, :to_unit ],
+          create: [ :from_unit, :to_unit ],
+          update: [ :from_unit, :to_unit ]
+        }
+      end
+    end
+  end
+end

data/app/controllers/dscf/marketplace/units_controller.rb

@@ -0,0 +1,26 @@
+module Dscf
+  module Marketplace
+    class UnitsController < ApplicationController
+      include Dscf::Core::Common
+
+      private
+
+      def model_params
+        params.require(:unit).permit(:code, :name, :unit_type)
+      end
+
+      def eager_loaded_associations
+        [ :unit_conversions ]
+      end
+
+      def default_serializer_includes
+        {
+          index: [ :unit_conversions ],
+          show: [ :unit_conversions ],
+          create: [],
+          update: []
+        }
+      end
+    end
+  end
+end

data/app/models/dscf/marketplace/category.rb

@@ -12,6 +12,15 @@ module Dscf
 
       scope :root_categories, -> { where(parent_id: nil) }
 
+      # Ransack configuration for secure filtering
+      def self.ransackable_attributes(_auth_object = nil)
+        %w[id name description parent_id created_at updated_at]
+      end
+
+      def self.ransackable_associations(_auth_object = nil)
+        %w[parent subcategories products]
+      end
+
       def root?
         parent_id.nil?
       end

data/app/models/dscf/marketplace/delivery_order.rb

@@ -18,6 +18,21 @@ module Dscf::Marketplace
 
     before_save :calculate_actual_delivery_price, if: :status_changed?
 
+    # Ransack configuration for secure filtering
+    def self.ransackable_attributes(_auth_object = nil)
+      %w[id driver_id pickup_address_id delivery_vehicle_id status vehicle_type estimated_delivery_price actual_delivery_price estimated_delivery_time actual_delivery_time delivery_notes created_at updated_at]
+    end
+
+    # Override ransack to handle JSON fields
+    def self.ransack(params = {}, options = {})
+      params ||= {}
+      super(params.except("optimized_route"), options)
+    end
+
+    def self.ransackable_associations(_auth_object = nil)
+      %w[driver pickup_address delivery_vehicle delivery_order_items marketplace_orders]
+    end
+
     def pickup!
       return false unless assigned?
       update!(status: :picked_up, actual_delivery_time: Time.current)