edr-platform/apps/edr-freight-api/src/modules/shipping-lines/shipping-line-bookings.controller.ts

import { CurrentUser } from "@edr/api-common";
import {
  Body,
  Controller,
  Get,
  Param,
  ParseUUIDPipe,
  Post,
} from "@nestjs/common";
import { ApiBearerAuth, ApiOperation, ApiTags } from "@nestjs/swagger";

import { PortalCustomer } from "../../common/booking-guards";
import { CancelShippingLineBookingDto } from "./dto/cancel-shipping-line-booking.dto";
import { InitiateShippingLineBookingDto } from "./dto/initiate-shipping-line-booking.dto";
import { ShippingLineBookingsService } from "./shipping-line-bookings.service";

interface CurrentIamUser {
  id: string;
}

/**
 * Bookings a shipping line makes for itself, from the portal.
 *
 * Separate from `/bookings` (customers) on purpose — see
 * {@link ShippingLineBookingsService} for why the two flows are not merged.
 * `PortalCustomer` only proves a valid portal session; the service resolves the
 * shipping-line account from that session and rejects anyone else, so the owner
 * is never taken from the request body.
 */
@ApiTags("shipping-line-bookings")
@Controller("shipping-line-bookings")
@ApiBearerAuth()
export class ShippingLineBookingsController {
  constructor(
    private readonly shippingLineBookingsService: ShippingLineBookingsService,
  ) {}

  @Post("initiate")
  @PortalCustomer()
  @ApiOperation({
    summary:
      "Initiate a bare booking (no contract). Starts at AWAITING_DOCUMENTS so the shipping line can upload its documents for Operations to approve.",
  })
  async initiate(
    @CurrentUser() user: CurrentIamUser,
    @Body() dto: InitiateShippingLineBookingDto,
  ) {
    return this.shippingLineBookingsService.initiate(user.id, dto);
  }

  // Declared before @Get(":id") so the path isn't captured as a booking id.
  @Get("reference-data")
  @PortalCustomer()
  @ApiOperation({
    summary:
      "Catalog for the initiate form: bookable routes (each carrying its trade direction) and service types.",
  })
  async referenceData(@CurrentUser() user: CurrentIamUser) {
    return this.shippingLineBookingsService.referenceData(user.id);
  }

  @Get("my")
  @PortalCustomer()
  @ApiOperation({ summary: "List the signed-in shipping line's bookings." })
  async listMine(@CurrentUser() user: CurrentIamUser) {
    return this.shippingLineBookingsService.listMine(user.id);
  }

  // Declared before @Get(":id") so the path isn't captured as a booking id.
  @Get("my-trains")
  @PortalCustomer()
  @ApiOperation({
    summary:
      "Train departures dedicated to the signed-in shipping line. These trains are hidden from customers; this is the only portal read that surfaces them.",
  })
  async listMyTrains(@CurrentUser() user: CurrentIamUser) {
    return this.shippingLineBookingsService.listMyTrains(user.id);
  }

  @Get(":id")
  @PortalCustomer()
  @ApiOperation({ summary: "Get one of the signed-in shipping line's bookings." })
  async findMine(
    @CurrentUser() user: CurrentIamUser,
    @Param("id", ParseUUIDPipe) id: string,
  ) {
    return this.shippingLineBookingsService.findMine(user.id, id);
  }

  @Post(":id/cancel")
  @PortalCustomer()
  @ApiOperation({
    summary:
      "Cancel one of the signed-in shipping line's own bookings. Allowed only before the booking is priced.",
  })
  async cancelMine(
    @CurrentUser() user: CurrentIamUser,
    @Param("id", ParseUUIDPipe) id: string,
    @Body() dto: CancelShippingLineBookingDto,
  ) {
    return this.shippingLineBookingsService.cancelMine(
      user.id,
      id,
      dto.reason,
    );
  }
}