AiDOPWarehouse/server/Plugins/Admin.NET.Plugin.AiDOP/Controllers/S8/AdoS8ExceptionsController.cs

using Admin.NET.Plugin.AiDOP.Infrastructure.S8;
using Admin.NET.Plugin.AiDOP.Const.S8;
using Admin.NET.Plugin.AiDOP.Dto.S8;
using Admin.NET.Plugin.AiDOP.Infrastructure;
using Admin.NET.Plugin.AiDOP.Service.S8;

namespace Admin.NET.Plugin.AiDOP.Controllers.S8;

[ApiController]
[Route("api/aidop/s8/exceptions")]
[NonUnify]
public class AdoS8ExceptionsController : ControllerBase
{
    private readonly S8ExceptionService _exceptionSvc;
    private readonly S8TaskFlowService _taskFlowSvc;
    private readonly S8DecisionService _decisionSvc;
    private readonly S8TrustedScopeResolver _scope;

    public AdoS8ExceptionsController(
        S8ExceptionService exceptionSvc,
        S8TaskFlowService taskFlowSvc,
        S8DecisionService decisionSvc,
        S8TrustedScopeResolver scope)
    {
        _exceptionSvc = exceptionSvc;
        _taskFlowSvc = taskFlowSvc;
        _decisionSvc = decisionSvc;
        _scope = scope;
    }

    [HttpGet]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetPagedAsync([FromQuery] AdoS8ExceptionQueryDto q)
    {
        // S8-TENANT-FACTORY-P0-CLOSURE-1：作用域一律服务端解析，覆盖客户端传入值。
        var scope = await _scope.ResolveAsync();
        q.TenantId = scope.TenantId;
        var (total, list) = await _exceptionSvc.GetPagedAsync(q);
        return Ok(new { total, page = q.Page, pageSize = q.PageSize, list });
    }

    [HttpGet("filter-options")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetFilterOptionsAsync([FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1)
    {
        // Compatibility-only. Security scope is resolved server-side.
        _ = tenantId; _ = factoryId;
        var scope = await _scope.ResolveAsync();
        return Ok(await _exceptionSvc.GetFilterOptionsAsync(scope.TenantId));
    }

    [HttpGet("{id:long}")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetDetailAsync(long id, [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1)
    {
        // Compatibility-only. Security scope is resolved server-side.
        _ = tenantId; _ = factoryId;
        var scope = await _scope.ResolveAsync();
        var detail = await _exceptionSvc.GetDetailAsync(id, scope.TenantId);
        return detail == null ? NotFound() : Ok(detail);
    }

    [HttpGet("{id:long}/timeline")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetTimelineAsync(long id)
    {
        if (!await IsInScopeAsync(id)) return NotFound();
        return Ok(await _decisionSvc.GetTimelineAsync(id));
    }

    [HttpGet("{id:long}/decisions")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetDecisionsAsync(long id)
    {
        if (!await IsInScopeAsync(id)) return NotFound();
        return Ok(await _decisionSvc.GetDecisionsAsync(id));
    }

    [HttpGet("{id:long}/evidences")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetEvidencesAsync(long id)
    {
        if (!await IsInScopeAsync(id)) return NotFound();
        return Ok(await _decisionSvc.GetEvidencesAsync(id));
    }

    /// <summary>子资源归属由父异常派生；不在可信作用域内一律按「不存在」处理，不泄露他租户资源是否存在。</summary>
    private async Task<bool> IsInScopeAsync(long exceptionId)
    {
        var scope = await _scope.ResolveAsync();
        return await _decisionSvc.IsExceptionInScopeAsync(exceptionId, scope.TenantId);
    }

    [HttpPost("{id:long}/claim")]
    [S8Permission(S8PermissionCatalog.ExceptionClaim)]
    /// <summary>
    /// 认领。<b>处理人恒为当前登录账号</b>，请求体只带备注 ——
    /// 「替别人指派」是 <c>POST {id}/transfer</c>（权限位 <c>ExceptionAssign</c>）。
    /// 已被他人抢先认领时返回 400「该异常已被其他人员认领」。
    /// </summary>
    public async Task<IActionResult> ClaimAsync(long id, [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8ClaimBody? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.ClaimAsync(id, scope.TenantId, body?.Remark);
            return Ok(new { id = e.Id, status = e.Status, assigneeUserId = e.AssigneeUserId });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/transfer")]
    [S8Permission(S8PermissionCatalog.ExceptionAssign)]
    public async Task<IActionResult> TransferAsync(long id, [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8TransferDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.TransferAsync(id, scope.TenantId, body?.AssigneeUserId ?? 0, body?.Remark);
            return Ok(new { id = e.Id, assigneeUserId = e.AssigneeUserId });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/start-progress")]
    [S8Permission(S8PermissionCatalog.ExceptionStart)]
    public async Task<IActionResult> StartProgressAsync(long id, [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8CommentDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.StartProgressAsync(id, scope.TenantId, body?.Remark);
            return Ok(new { id = e.Id, status = e.Status });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/upgrade")]
    [S8Permission(S8PermissionCatalog.ExceptionUpgrade)]
    public async Task<IActionResult> UpgradeAsync(long id, [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8CommentDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.UpgradeAsync(id, scope.TenantId, body?.Remark);
            return Ok(new { id = e.Id, status = e.Status });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/reject")]
    [S8Permission(S8PermissionCatalog.ExceptionReject)]
    public async Task<IActionResult> RejectAsync(long id, [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8CommentDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.RejectAsync(id, scope.TenantId, body?.Remark);
            return Ok(new { id = e.Id, status = e.Status });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/submit-verification")]
    [S8Permission(S8PermissionCatalog.VerificationSubmit)]
    public async Task<IActionResult> SubmitVerificationAsync(long id,
        [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8SubmitVerificationDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.SubmitVerificationAsync(
                id, scope.TenantId, body?.VerifierUserId ?? 0, body?.Remark);
            return Ok(new { id = e.Id, status = e.Status, verifierUserId = e.VerifierUserId });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/approve-verification")]
    [S8Permission(S8PermissionCatalog.VerificationApprove)]
    public async Task<IActionResult> ApproveVerificationAsync(long id,
        [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8ApproveVerificationDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.ApproveVerificationAsync(id, scope.TenantId, body?.Remark);
            return Ok(new { id = e.Id, status = e.Status });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/reject-verification")]
    [S8Permission(S8PermissionCatalog.VerificationReject)]
    public async Task<IActionResult> RejectVerificationAsync(long id,
        [FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1,
        [FromBody] AdoS8RejectVerificationDto? body = null)
    {
        _ = tenantId; _ = factoryId;
        try
        {
            var scope = await _scope.ResolveAsync();
            var e = await _taskFlowSvc.RejectVerificationAsync(id, scope.TenantId, body?.Remark ?? string.Empty);
            return Ok(new { id = e.Id, status = e.Status });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpPost("{id:long}/comment")]
    [S8Permission(S8PermissionCatalog.ExceptionComment)]
    public async Task<IActionResult> CommentAsync(long id, [FromBody] AdoS8CommentDto? body = null)
    {
        try
        {
            var scope = await _scope.ResolveAsync();
            await _taskFlowSvc.CommentAsync(id, scope.TenantId, body?.Remark);
            return Ok(new { id });
        }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }
}

/// <summary>
/// 认领请求体。<b>刻意不含处理人字段</b> —— 处理人由服务端从登录上下文取，
/// 留一个"服务端会忽略"的 assignee 字段只会让调用方以为自己能替别人认领。
/// </summary>
public class AdoS8ClaimBody
{
    public string? Remark { get; set; }
}