Class: Dscf::Marketplace::OrdersController

Inherits:
ApplicationController show all
Includes:
Core::Common
Defined in:
app/controllers/dscf/marketplace/orders_controller.rb

Instance Method Summary collapse

Methods inherited from ApplicationController

#bypass_permissions_for_demo?, #pundit_user

Instance Method Details

#accept_adjustment ⇒ Object 



360
361
362
363
364
365
366
367
368
369
370
371
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 360

def accept_adjustment
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.accept_item_adjustment(obj, item)
  create_notification_for_order(obj, :adjustment_accepted)
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#adjust_item ⇒ Object 



342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 342

def adjust_item
  obj = find_record
  authorize obj, :supplier_confirm?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.adjust_item(
    obj, item,
    unit_price: params[:unit_price],
    quantity: params[:quantity],
    note: params[:note]
  )
  create_notification_for_order(obj, :supplier_adjusted, reason: params[:note])
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#apply_retailer_confirmation(order) ⇒ Object

The retailer's confirm-or-cancel decision applied to one order row.



435
436
437
438
439
440
441
442
443
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 435

def apply_retailer_confirmation(order)
  if retailer_rejecting?
    order.update!(status: :cancelled)
    order.order_items.update_all(status: OrderItem.statuses[:cancelled])
  else
    order.update!(status: :confirmed)
    order.order_items.update_all(status: OrderItem.statuses[:confirmed])
  end
end

#assign_source ⇒ Object 



285
286
287
288
289
290
291
292
293
294
295
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 285

def assign_source
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.assign_source(item, source_type: params[:source_type], source_id: params[:source_id])
  render_success(data: item)
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#cancel ⇒ Object 



163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 163

def cancel
  @obj = find_record
  authorize @obj, :cancel?

  # Cancelling the retailer-facing parent cancels every sub-order that
  # hasn't already completed; the parent's own status follows via
  # aggregation (child after_save -> sync_aggregates!).
  if @obj.parent?
    ActiveRecord::Base.transaction do
      @obj.sub_orders.where.not(status: :completed).find_each do |sub_order|
        sub_order.update!(status: :cancelled)
        sub_order.order_items.update_all(status: OrderItem.statuses[:cancelled])
      end
    end
    return render_success("orders.success.cancelled", data: @obj.reload)
  end

  if @obj.update(status: :cancelled)
    @obj.order_items.update_all(status: OrderItem.statuses[:cancelled])
    render_success("orders.success.cancelled", data: @obj)
  else
    render_error("orders.errors.cancel_failed")
  end
end

#complete ⇒ Object 



188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 188

def complete
  @obj = find_record
  authorize @obj, :complete?
  return if parent_order_guard(@obj)

  if @obj.can_be_completed? && @obj.update(status: :completed)
    @obj.order_items.update_all(status: OrderItem.statuses[:fulfilled])
    begin
      invoice = Dscf::Marketplace::InvoicePdfGenerator.new(@obj).generate!
      render_success("orders.success.completed", data: @obj, meta: {invoice_id: invoice.id})
    rescue => e
      Rails.logger.error("Invoice generation failed for order #{@obj.id}: #{e.message}")
      render_success("orders.success.completed", data: @obj)
    end
  else
    render_error("orders.errors.complete_failed")
  end
end

#confirm ⇒ Object 



110
111
112
113
114
115
116
117
118
119
120
121
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 110

def confirm
  @obj = find_record
  authorize @obj, :confirm?
  return if parent_order_guard(@obj)
  return render_error("orders.errors.otp_confirmation_required", status: :unprocessable_entity) if @obj.agent_assisted? && !@obj.otp_verified?

  if @obj.confirm!
    render_success("orders.success.confirmed", data: @obj)
  else
    render_error("orders.errors.confirm_failed")
  end
end

#confirm_agent_order ⇒ Object

The agent enters the OTP the retailer received to confirm an agent-assisted order. This does not touch status — it only unblocks validate/confirm (see the guards there), keeping the OTP gate independent of the existing fulfillment state machine.



127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 127

def confirm_agent_order
  @obj = find_record
  authorize @obj, :confirm_agent_order?
  return render_error(errors: "Order was not placed by an agent", status: :unprocessable_entity) unless @obj.agent_assisted?

  otp = @obj.otp_verifications.order(created_at: :desc).first
  return render_error(errors: "No OTP has been sent for this order", status: :unprocessable_entity) unless otp

  case otp.verify(params[:otp_code])
  when :verified
    create_notification_for_order(@obj, :agent_order_confirmed)
    notify_agent_order_confirmed(@obj)
    render_success(data: @obj, serializer_options: { include: default_serializer_includes[:show] || [] })
  when :expired
    render_error(errors: "OTP has expired, request a new one", status: :unprocessable_entity)
  when :max_attempts_exceeded
    render_error(errors: "Too many incorrect attempts, request a new OTP", status: :unprocessable_entity)
  else
    render_error(errors: "Incorrect OTP", status: :unprocessable_entity)
  end
end

#confirm_item ⇒ Object 



326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 326

def confirm_item
  obj = find_record
  authorize obj, :supplier_confirm?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  confirmed = params[:confirmed] != false
  reason = params[:reason]
  Dscf::Marketplace::OrderSplittingService.confirm_item(obj, item, confirmed: confirmed, reason: reason)

  create_notification_for_order(obj, confirmed ? :supplier_confirmed : :supplier_rejected, reason: reason)
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#create ⇒ Object 



6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 6

def create
  authorize @clazz.new, :create?
  return render_unsupported_payment_method if unsupported_payment_method_for_new_order?(model_params[:payment_method])

  return create_direct_listing_order if direct_listing_request?

  obj = @clazz.new(model_params.except(:retailer_id))
  if obj.save
    obj = @clazz.includes(eager_loaded_associations).find(obj.id) if eager_loaded_associations.present?
    includes = default_serializer_includes[:create] || []
    options = {include: includes} if includes.present?
    render_success(data: obj, serializer_options: options, status: :created)
  else
    render_error(errors: obj.errors.full_messages.join(", "), status: :unprocessable_entity)
  end
rescue => e
  render_error(error: e.message)
end

#create_notification_for_order(order, action, reason: nil, otp_code: nil) ⇒ Object 



446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 446

def create_notification_for_order(order, action, reason: nil, otp_code: nil)
  recipient = order.ordered_by || order.user
  return unless recipient

  title = case action
  when :validation_completed then "Order ##{order.id} validation complete"
  when :item_resolved then "Item resolved in order ##{order.id}"
  when :split_ready then "Order ##{order.id} ready for supplier confirmation"
  when :supplier_confirmed then "Supplier confirmed order ##{order.id}"
  when :supplier_rejected then "Supplier rejected item in order ##{order.id}"
  when :supplier_adjusted then "Supplier proposed an adjustment on order ##{order.id}"
  when :adjustment_accepted then "Adjustment accepted on order ##{order.id}"
  when :adjustment_rejected then "Adjustment rejected on order ##{order.id}"
  when :retailer_confirmed then "Retailer confirmed order ##{order.id}"
  when :retailer_rejected then "Retailer cancelled order ##{order.id}"
  when :agent_order_placed then "Your agent placed order ##{order.id}"
  when :agent_order_confirmed then "Order ##{order.id} confirmed"
  else "Order ##{order.id} update"
  end

  body = case action
  when :supplier_rejected, :retailer_rejected, :supplier_adjusted, :adjustment_rejected
    "Reason: #{reason}" if reason
  when :agent_order_placed
    "Your agent placed an order on your behalf. Your confirmation code is #{otp_code}. Share it only with your agent to confirm the order."
  else "Status: #{order.status}"
  end

  notification = Dscf::Core::Notification.create!(
    notifiable: order,
    recipient: recipient,
    notification_type: :general,
    title: title,
    body: body.to_s
  )
  Dscf::Core::NotificationService.deliver(notification)
end

#filter ⇒ Object 



90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 90

def filter
  authorize @clazz.new, :filter?
  orders = @clazz.all

  # Apply Ransack filtering if q params present
  if params[:q].present?
    orders = orders.ransack(params[:q]).result
  end

  # Apply eager loading
  orders = orders.includes(eager_loaded_associations) if eager_loaded_associations.present?

  # Add serializer includes
  includes = serializer_includes_for_action(:index)
  options = {}
  options[:include] = includes if includes.present?

  render_success(data: orders, serializer_options: options)
end

#invoice ⇒ Object 



207
208
209
210
211
212
213
214
215
216
217
218
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 207

def invoice
  @obj = find_record
  authorize @obj, :show?
  return if parent_order_guard(@obj)

  invoice = @obj.order_invoice
  if invoice&.pdf_file&.attached?
    redirect_to rails_storage_proxy_url(invoice.pdf_file, disposition: "attachment")
  else
    render_error("orders.errors.no_invoice")
  end
end

#my_orders ⇒ Object 



220
221
222
223
224
225
226
227
228
229
230
231
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 220

def my_orders
  authorize @clazz.new, :my_orders?
  service = MyResourceService.new(current_user)
  orders = service.my_orders(params)

  options = {
    include: default_serializer_includes[:index] || [],
    meta: {resource_type: "my_orders"}
  }

  render_success("orders.success.index", data: orders, serializer_options: options)
end

#notify_agent_order_confirmed(order) ⇒ Object

After the retailer's OTP confirms an agent-assisted order, both the agent and the aggregator (the business the order was placed with) get notified, in addition to the retailer's own notification above.



487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 487

def notify_agent_order_confirmed(order)
  # A parent order has no ordered_to of its own — notify every
  # sub-order's fulfilling business instead.
  ordered_to_users = order.parent? ? order.sub_orders.map { |so| so.ordered_to&.user } : [ order.ordered_to&.user ]
  [ order.agent&.user, *ordered_to_users ].compact.uniq.each do |recipient|
    notification = Dscf::Core::Notification.create!(
      notifiable: order,
      recipient: recipient,
      notification_type: :general,
      title: "Order ##{order.id} confirmed",
      body: "The retailer confirmed order ##{order.id} via OTP."
    )
    Dscf::Core::NotificationService.deliver(notification)
  end
end

#reject_adjustment ⇒ Object 



373
374
375
376
377
378
379
380
381
382
383
384
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 373

def reject_adjustment
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.reject_item_adjustment(obj, item, reason: params[:reason])
  create_notification_for_order(obj, :adjustment_rejected, reason: params[:reason])
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#reopen_item ⇒ Object

Re-source loop: reopen a cancelled line (e.g. a supplier who didn't confirm) so the aggregator can assign a new source via assign_source.



388
389
390
391
392
393
394
395
396
397
398
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 388

def reopen_item
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])
  Dscf::Marketplace::OrderSplittingService.reopen_item(obj, item)
  render_success(data: obj.reload, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#reorder ⇒ Object

One-tap reorder: rebuild a past order's basket and place it again.

An order line records the PRODUCT, not the aggregator listing it came from (a supplier-sourced feed line stores the fulfilling business as its source), so lines are re-resolved against what the same seller offers today rather than replayed. That also means the new order is priced at today's price — a stale price can't be honoured.

Lines that can no longer be sourced are skipped and lines short on stock are clamped, both reported in meta, so one sold-out item doesn't block the whole reorder.



36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 36

def reorder
  source_order = find_record
  authorize source_order, :reorder?

  unless source_order.direct_listing?
    return render_error(errors: "Only direct listing orders can be reordered", status: :unprocessable_entity)
  end

  resolved_items, skipped, adjusted = resolve_reorder_items(source_order)

  if resolved_items.empty?
    # Distinguish "nothing left to reorder" from "everything is
    # unavailable" — an order whose lines were all cancelled has no
    # availability problem, and reporting one sends the caller hunting
    # through listings for a cause that isn't there.
    message = if skipped.empty?
      "Order ##{source_order.id} has no reorderable items (every line was cancelled or the order has no items)"
    else
      "None of the items on order ##{source_order.id} are available to reorder"
    end

    return render_error(errors: message, status: :unprocessable_entity, skipped_items: skipped)
  end

  parent, orders = place_direct_listing_cart(resolved_items, base_attrs: reorder_base_attributes(source_order))

  new_order = parent || orders.first
  new_order = @clazz.includes(eager_loaded_associations).find(new_order.id) if eager_loaded_associations.present?
  includes = default_serializer_includes[:create] || []
  options = {include: includes} if includes.present?

  meta = {
    reordered_from: source_order.id,
    reordered_items: resolved_items.size,
    skipped_items: skipped,
    adjusted_items: adjusted
  }
  if parent
    meta[:split_by_business] = true
    meta[:order_count] = orders.size
  end

  render_success(data: new_order, serializer_options: options, status: :created, meta: meta)
rescue ActiveRecord::RecordNotFound
  # An unknown order id is a 404, not a business-rule failure — the broad
  # rescue below would otherwise report it as 422.
  raise
rescue ActiveRecord::RecordInvalid => e
  errors = e.record&.errors&.full_messages&.presence || [ e.message ]
  render_error(errors: errors.join(", "), status: :unprocessable_entity)
rescue => e
  render_error(error: e.message)
end

#resend_agent_order_otp ⇒ Object 



149
150
151
152
153
154
155
156
157
158
159
160
161
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 149

def resend_agent_order_otp
  @obj = find_record
  authorize @obj, :confirm_agent_order?
  return render_error(errors: "Order was not placed by an agent", status: :unprocessable_entity) unless @obj.agent_assisted?

  phone = @obj.otp_verifications.order(created_at: :desc).first&.phone ||
    Dscf::Marketplace::Retailer.find_by(user_id: @obj.ordered_by_id)&.phone
  return render_error(errors: "No retailer phone number on file for this order", status: :unprocessable_entity) if phone.blank?

  otp = Dscf::Marketplace::OtpVerification.generate_for(@obj, phone: phone)
  create_notification_for_order(@obj, :agent_order_placed, otp_code: otp.code)
  render_success(data: @obj, serializer_options: { include: default_serializer_includes[:show] || [] })
end

#resolve_item ⇒ Object 



246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 246

def resolve_item
  obj = find_record
  authorize obj, :resolve_item?
  return if parent_order_guard(obj)

  item = obj.order_items.find(params[:order_item_id])

  if params[:action_type] == "remove"
    # No quantity available (or the aggregator otherwise can't source it):
    # cancel the line rather than zeroing quantity (which fails the
    # quantity > 0 validation) — cancelled lines are excluded from the
    # order total and from all_items_validated? gating.
    item.validation_status = :validated
    item.status = :cancelled
  else
    # Store the resolved_* audit trail AND apply it to the actual
    # unit_price/quantity — those are what total_amount/subtotal read,
    # so "use listed price" / "reduce to available qty" must land here
    # to actually change what's charged.
    if params[:resolved_unit_price].present?
      item.resolved_unit_price = params[:resolved_unit_price]
      item.unit_price = params[:resolved_unit_price]
      item.validation_status = :validated
    end
    if params[:resolved_quantity].present?
      item.resolved_quantity = params[:resolved_quantity]
      item.quantity = params[:resolved_quantity]
      item.validation_status = :validated
    end
  end

  item.save!
  obj.save! # recompute total_amount from the resolved/cancelled line
  create_notification_for_order(obj, :item_resolved)
  render_success(data: item)
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#retailer_confirm ⇒ Object 



400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 400

def retailer_confirm
  obj = find_record
  authorize obj, :confirm? # reuse existing or add specific

  # The retailer confirms the parent once; the decision fans out to every
  # sub-order that's ready. Sub-orders still waiting on their supplier are
  # left untouched — they come back for confirmation when ready.
  notification = retailer_rejecting? ? :retailer_rejected : :retailer_confirmed

  if obj.parent?
    ready = obj.sub_orders.to_a.select(&:retailer_can_confirm?)
    return render_error(errors: "Order not ready for retailer confirmation") if ready.empty?

    ActiveRecord::Base.transaction do
      ready.each { |sub_order| apply_retailer_confirmation(sub_order) }
    end
    create_notification_for_order(obj.reload, notification, reason: params[:reason])
    return render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
  end

  return render_error(errors: "Order not ready for retailer confirmation") unless obj.retailer_can_confirm?

  apply_retailer_confirmation(obj)
  create_notification_for_order(obj, notification, reason: params[:reason])

  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#retailer_rejecting? ⇒ Boolean

Returns:

  • (Boolean) 


430
431
432
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 430

def retailer_rejecting?
  params[:confirmed] == false
end

#split ⇒ Object 



297
298
299
300
301
302
303
304
305
306
307
308
309
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 297

def split
  obj = find_record
  authorize obj, :split?
  return if parent_order_guard(obj)

  return render_error(errors: "All items must be validated before splitting") unless obj.all_items_validated?

  Dscf::Marketplace::OrderSplittingService.perform_split(obj)
  create_notification_for_order(obj, :split_ready)
  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#supplier_confirm ⇒ Object 



311
312
313
314
315
316
317
318
319
320
321
322
323
324
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 311

def supplier_confirm
  obj = find_record
  authorize obj, :supplier_confirm?
  return if parent_order_guard(obj)

  confirmed = params[:confirmed]
  reason = params[:reason]
  Dscf::Marketplace::OrderSplittingService.supplier_confirm(obj, confirmed: confirmed != false, reason: reason)

  create_notification_for_order(obj, confirmed ? :supplier_confirmed : :supplier_rejected, reason: reason)
  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end

#validate ⇒ Object 



233
234
235
236
237
238
239
240
241
242
243
244
 
# File 'app/controllers/dscf/marketplace/orders_controller.rb', line 233

def validate
  obj = find_record
  authorize obj, :validate?
  return if parent_order_guard(obj)
  return render_error(errors: "Order awaits retailer OTP confirmation", status: :unprocessable_entity) if obj.agent_assisted? && !obj.otp_verified?

  Dscf::Marketplace::OrderValidationService.validate(obj)
  create_notification_for_order(obj, :validation_completed)
  render_success(data: obj, serializer_options: { include: default_serializer_includes[:show] || [] })
rescue => e
  render_error(errors: e.message, status: :unprocessable_entity)
end