Class: Dscf::Marketplace::OrdersController

Inherits:
ApplicationController show all
Includes:
Core::Common
Defined in:
app/controllers/dscf/marketplace/orders_controller.rb

Instance Method Summary collapse

Methods inherited from ApplicationController

#bypass_permissions_for_demo?, #pundit_user

Instance Method Details

#accept_adjustment ⇒ Object 



295
296
297
298
299
300
301
302
303
304
305
306
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 295

def accept_adjustment
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.accept_item_adjustment(obj, item)
  create_notification_for_order(obj, :adjustment_accepted)
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#adjust_item ⇒ Object 



277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 277

def adjust_item
  obj = find_record
  authorize obj, :supplier_confirm?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.adjust_item(
    obj, item,
    unit_price: params[:unit_price],
    quantity: params[:quantity],
    note: params[:note]
  )
  create_notification_for_order(obj, :supplier_adjusted, reason: params[:note])
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#apply_retailer_confirmation(order) ⇒ Object

The retailer's confirm-or-cancel decision applied to one order row.



370
371
372
373
374
375
376
377
378
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 370

def apply_retailer_confirmation(order)
  if retailer_rejecting?
    order.update!(status: :cancelled)
    order.order_items.update_all(status: OrderItem.statuses[:cancelled])
  else
    order.update!(status: :confirmed)
    order.order_items.update_all(status: OrderItem.statuses[:confirmed])
  end
end

#assign_source ⇒ Object 



220
221
222
223
224
225
226
227
228
229
230
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 220

def assign_source
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.assign_source(item, source_type: params[:source_type], source_id: params[:source_id])
  render_success(data: item)
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#cancel ⇒ Object 



98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 98

def cancel
  @obj = find_record
  authorize @obj, :cancel?

  # Cancelling the retailer-facing parent cancels every sub-order that
  # hasn't already completed; the parent's own status follows via
  # aggregation (child after_save -> sync_aggregates!).
  if @obj.parent?
    ActiveRecord::Base.transaction do
      @obj.sub_orders.where.not(status: :completed).find_each do |sub_order|
        sub_order.update!(status: :cancelled)
        sub_order.order_items.update_all(status: OrderItem.statuses[:cancelled])
      end
    end
    return render_success("orders.success.cancelled", data: @obj.reload)
  end

  if @obj.update(status: :cancelled)
    @obj.order_items.update_all(status: OrderItem.statuses[:cancelled])
    render_success("orders.success.cancelled", data: @obj)
  else
    render_error("orders.errors.cancel_failed")
  end
end

#complete ⇒ Object 



123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 123

def complete
  @obj = find_record
  authorize @obj, :complete?
  return if parent_order_guard(@obj)

  if @obj.can_be_completed? && @obj.update(status: :completed)
    @obj.order_items.update_all(status: OrderItem.statuses[:fulfilled])
    begin
      invoice = Dscf::Marketplace::InvoicePdfGenerator.new(@obj).generate!
      render_success("orders.success.completed", data: @obj, meta: {invoice_id: invoice.id})
    rescue => e
      Rails.logger.error("Invoice generation failed for order #{@obj.id}: #{e.message}")
      render_success("orders.success.completed", data: @obj)
    end
  else
    render_error("orders.errors.complete_failed")
  end
end

#confirm ⇒ Object 



45
46
47
48
49
50
51
52
53
54
55
56
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 45

def confirm
  @obj = find_record
  authorize @obj, :confirm?
  return if parent_order_guard(@obj)
  return render_error("orders.errors.otp_confirmation_required", status: :unprocessable_entity) if @obj.agent_assisted? && !@obj.otp_verified?

  if @obj.confirm!
    render_success("orders.success.confirmed", data: @obj)
  else
    render_error("orders.errors.confirm_failed")
  end
end

#confirm_agent_order ⇒ Object

The agent enters the OTP the retailer received to confirm an agent-assisted order. This does not touch status — it only unblocks validate/confirm (see the guards there), keeping the OTP gate independent of the existing fulfillment state machine.



62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 62

def confirm_agent_order
  @obj = find_record
  authorize @obj, :confirm_agent_order?
  return render_error(errors: "Order was not placed by an agent", status: :unprocessable_entity) unless @obj.agent_assisted?

  otp = @obj.otp_verifications.order(created_at: :desc).first
  return render_error(errors: "No OTP has been sent for this order", status: :unprocessable_entity) unless otp

  case otp.verify(params[:otp_code])
  when :verified
    create_notification_for_order(@obj, :agent_order_confirmed)
    notify_agent_order_confirmed(@obj)
    render_success(data: @obj, serializer_options: { include: default_serializer_includes[:show] || [] })
  when :expired
    render_error(errors: "OTP has expired, request a new one", status: :unprocessable_entity)
  when :max_attempts_exceeded
    render_error(errors: "Too many incorrect attempts, request a new OTP", status: :unprocessable_entity)
  else
    render_error(errors: "Incorrect OTP", status: :unprocessable_entity)
  end
end

#confirm_item ⇒ Object 



261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 261

def confirm_item
  obj = find_record
  authorize obj, :supplier_confirm?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  confirmed = params[:confirmed] != false
  reason = params[:reason]
  Dscf::Marketplace::OrderSplittingService.confirm_item(obj, item, confirmed: confirmed, reason: reason)

  create_notification_for_order(obj, confirmed ? :supplier_confirmed : :supplier_rejected, reason: reason)
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#create ⇒ Object 



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 6

def create
  authorize @clazz.new, :create?
  return render_unsupported_payment_method if unsupported_payment_method_for_new_order?(model_params[:payment_method])

  return create_direct_listing_order if direct_listing_request?

  obj = @clazz.new(model_params.except(:retailer_id))
  if obj.save
    obj = @clazz.includes(eager_loaded_associations).find(obj.id) if eager_loaded_associations.present?
    includes = default_serializer_includes[:create] || []
    options = {include: includes} if includes.present?
    render_success(data: obj, serializer_options: options, status: :created)
  else
    render_error(errors: obj.errors.full_messages.join(", "), status: :unprocessable_entity)
  end
rescue => e
  render_error(error: e.message)
end

#create_notification_for_order(order, action, reason: nil, otp_code: nil) ⇒ Object 



381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 381

def create_notification_for_order(order, action, reason: nil, otp_code: nil)
  recipient = order.ordered_by || order.user
  return unless recipient

  title = case action
  when :validation_completed then "Order ##{order.id} validation complete"
  when :item_resolved then "Item resolved in order ##{order.id}"
  when :split_ready then "Order ##{order.id} ready for supplier confirmation"
  when :supplier_confirmed then "Supplier confirmed order ##{order.id}"
  when :supplier_rejected then "Supplier rejected item in order ##{order.id}"
  when :supplier_adjusted then "Supplier proposed an adjustment on order ##{order.id}"
  when :adjustment_accepted then "Adjustment accepted on order ##{order.id}"
  when :adjustment_rejected then "Adjustment rejected on order ##{order.id}"
  when :retailer_confirmed then "Retailer confirmed order ##{order.id}"
  when :retailer_rejected then "Retailer cancelled order ##{order.id}"
  when :agent_order_placed then "Your agent placed order ##{order.id}"
  when :agent_order_confirmed then "Order ##{order.id} confirmed"
  else "Order ##{order.id} update"
  end

  body = case action
  when :supplier_rejected, :retailer_rejected, :supplier_adjusted, :adjustment_rejected
    "Reason: #{reason}" if reason
  when :agent_order_placed
    "Your agent placed an order on your behalf. Your confirmation code is #{otp_code}. Share it only with your agent to confirm the order."
  else "Status: #{order.status}"
  end

  notification = Dscf::Core::Notification.create!(
    notifiable: order,
    recipient: recipient,
    notification_type: :general,
    title: title,
    body: body.to_s
  )
  Dscf::Core::NotificationService.deliver(notification)
end

#filter ⇒ Object 



25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 25

def filter
  authorize @clazz.new, :filter?
  orders = @clazz.all

  # Apply Ransack filtering if q params present
  if params[:q].present?
    orders = orders.ransack(params[:q]).result
  end

  # Apply eager loading
  orders = orders.includes(eager_loaded_associations) if eager_loaded_associations.present?

  # Add serializer includes
  includes = serializer_includes_for_action(:index)
  options = {}
  options[:include] = includes if includes.present?

  render_success(data: orders, serializer_options: options)
end

#invoice ⇒ Object 



142
143
144
145
146
147
148
149
150
151
152
153
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 142

def invoice
  @obj = find_record
  authorize @obj, :show?
  return if parent_order_guard(@obj)

  invoice = @obj.order_invoice
  if invoice&.pdf_file&.attached?
    redirect_to rails_storage_proxy_url(invoice.pdf_file, disposition: "attachment")
  else
    render_error("orders.errors.no_invoice")
  end
end

#my_orders ⇒ Object 



155
156
157
158
159
160
161
162
163
164
165
166
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 155

def my_orders
  authorize @clazz.new, :my_orders?
  service = MyResourceService.new(current_user)
  orders = service.my_orders(params)

  options = {
    include: default_serializer_includes[:index] || [],
    meta: {resource_type: "my_orders"}
  }

  render_success("orders.success.index", data: orders, serializer_options: options)
end

#notify_agent_order_confirmed(order) ⇒ Object

After the retailer's OTP confirms an agent-assisted order, both the agent and the aggregator (the business the order was placed with) get notified, in addition to the retailer's own notification above.



422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 422

def notify_agent_order_confirmed(order)
  # A parent order has no ordered_to of its own — notify every
  # sub-order's fulfilling business instead.
  ordered_to_users = order.parent? ? order.sub_orders.map { |so| so.ordered_to&.user } : [ order.ordered_to&.user ]
  [ order.agent&.user, *ordered_to_users ].compact.uniq.each do |recipient|
    notification = Dscf::Core::Notification.create!(
      notifiable: order,
      recipient: recipient,
      notification_type: :general,
      title: "Order ##{order.id} confirmed",
      body: "The retailer confirmed order ##{order.id} via OTP."
    )
    Dscf::Core::NotificationService.deliver(notification)
  end
end

#reject_adjustment ⇒ Object 



308
309
310
311
312
313
314
315
316
317
318
319
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 308

def reject_adjustment
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.reject_item_adjustment(obj, item, reason: params[:reason])
  create_notification_for_order(obj, :adjustment_rejected, reason: params[:reason])
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#reopen_item ⇒ Object

Re-source loop: reopen a cancelled line (e.g. a supplier who didn't confirm) so the aggregator can assign a new source via assign_source.



323
324
325
326
327
328
329
330
331
332
333
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 323

def reopen_item
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.reopen_item(obj, item)
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#resend_agent_order_otp ⇒ Object 



84
85
86
87
88
89
90
91
92
93
94
95
96
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 84

def resend_agent_order_otp
  @obj = find_record
  authorize @obj, :confirm_agent_order?
  return render_error(errors: "Order was not placed by an agent", status: :unprocessable_entity) unless @obj.agent_assisted?

  phone = @obj.otp_verifications.order(created_at: :desc).first&.phone ||
    Dscf::Marketplace::Retailer.find_by(user_id: @obj.ordered_by_id)&.phone
  return render_error(errors: "No retailer phone number on file for this order", status: :unprocessable_entity) if phone.blank?

  otp = Dscf::Marketplace::OtpVerification.generate_for(@obj, phone: phone)
  create_notification_for_order(@obj, :agent_order_placed, otp_code: otp.code)
  render_success(data: @obj, serializer_options: { include: default_serializer_includes[:show] || [] })
end

#resolve_item ⇒ Object 



181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 181

def resolve_item
  obj = find_record
  authorize obj, :resolve_item?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])

  if params[:action_type] == "remove"
    # No quantity available (or the aggregator otherwise can't source it):
    # cancel the line rather than zeroing quantity (which fails the
    # quantity > 0 validation) — cancelled lines are excluded from the
    # order total and from all_items_validated? gating.
    item.validation_status = :validated
    item.status = :cancelled
  else
    # Store the resolved_* audit trail AND apply it to the actual
    # unit_price/quantity — those are what total_amount/subtotal read,
    # so "use listed price" / "reduce to available qty" must land here
    # to actually change what's charged.
    if params[:resolved_unit_price].present?
      item.resolved_unit_price = params[:resolved_unit_price]
      item.unit_price = params[:resolved_unit_price]
      item.validation_status = :validated
    end
    if params[:resolved_quantity].present?
      item.resolved_quantity = params[:resolved_quantity]
      item.quantity = params[:resolved_quantity]
      item.validation_status = :validated
    end
  end

  item.save!
  obj.save! # recompute total_amount from the resolved/cancelled line
  create_notification_for_order(obj, :item_resolved)
  render_success(data: item)
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#retailer_confirm ⇒ Object 



335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 335

def retailer_confirm
  obj = find_record
  authorize obj, :confirm? # reuse existing or add specific

  # The retailer confirms the parent once; the decision fans out to every
  # sub-order that's ready. Sub-orders still waiting on their supplier are
  # left untouched — they come back for confirmation when ready.
  notification = retailer_rejecting? ? :retailer_rejected : :retailer_confirmed

  if obj.parent?
    ready = obj.sub_orders.to_a.select(&:retailer_can_confirm?)
    return render_error(errors: "Order not ready for retailer confirmation") if ready.empty?

    ActiveRecord::Base.transaction do
      ready.each { |sub_order| apply_retailer_confirmation(sub_order) }
    end
    create_notification_for_order(obj.reload, notification, reason: params[:reason])
    return render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
  end

  return render_error(errors: "Order not ready for retailer confirmation") unless obj.retailer_can_confirm?

  apply_retailer_confirmation(obj)
  create_notification_for_order(obj, notification, reason: params[:reason])

  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#retailer_rejecting? ⇒ Boolean

Returns:

  • (Boolean) 


365
366
367
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 365

def retailer_rejecting?
  params[:confirmed] == false
end

#split ⇒ Object 



232
233
234
235
236
237
238
239
240
241
242
243
244
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 232

def split
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  return render_error(errors: "All items must be validated before splitting") unless obj.all_items_validated?

  Dscf::Marketplace::OrderSplittingService.perform_split(obj)
  create_notification_for_order(obj, :split_ready)
  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#supplier_confirm ⇒ Object 



246
247
248
249
250
251
252
253
254
255
256
257
258
259
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 246

def supplier_confirm
  obj = find_record
  authorize obj, :supplier_confirm?
  return if parent_order_guard(obj)

  confirmed = params[:confirmed]
  reason = params[:reason]
  Dscf::Marketplace::OrderSplittingService.supplier_confirm(obj, confirmed: confirmed != false, reason: reason)

  create_notification_for_order(obj, confirmed ? :supplier_confirmed : :supplier_rejected, reason: reason)
  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#validate ⇒ Object 



168
169
170
171
172
173
174
175
176
177
178
179
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 168

def validate
  obj = find_record
  authorize obj, :validate?
  return if parent_order_guard(obj)
  return render_error(errors: "Order awaits retailer OTP confirmation", status: :unprocessable_entity) if obj.agent_assisted? && !obj.otp_verified?

  Dscf::Marketplace::OrderValidationService.validate(obj)
  create_notification_for_order(obj, :validation_completed)
  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end