AiDOPWarehouse/server/Plugins/Admin.NET.Plugin.AiDOP/Controllers/S8/AdoS8ReportsController.cs

using Admin.NET.Plugin.AiDOP.Infrastructure.S8;
using Admin.NET.Plugin.AiDOP.Const.S8;
using Admin.NET.Plugin.AiDOP.Dto.S8;
using Admin.NET.Plugin.AiDOP.Service.S8;

namespace Admin.NET.Plugin.AiDOP.Controllers.S8;

[ApiController]
[Route("api/aidop/s8/reports")]
[NonUnify]
public class AdoS8ReportsController : ControllerBase
{
    private readonly S8ManualReportService _svc;

    public AdoS8ReportsController(S8ManualReportService svc) => _svc = svc;

    [HttpGet("form-options")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    // Compatibility-only. Security scope is resolved server-side
    // (S8ManualReportService.ResolveTrustedScopeAsync 覆盖入参)。
    public async Task<IActionResult> FormOptionsAsync([FromQuery] long tenantId = 1, [FromQuery] long factoryId = 1) =>
        Ok(await _svc.GetFormOptionsAsync(tenantId, factoryId));

    [HttpPost]
    [S8Permission(S8PermissionCatalog.ExceptionCreate)]
    public async Task<IActionResult> CreateAsync([FromBody] AdoS8ManualReportCreateDto dto)
    {
        try { return Ok(await _svc.CreateAsync(dto)); }
        catch (S8NotFoundException) { return NotFound(); }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }

    [HttpGet("{id:long}")]
    [S8Permission(S8PermissionCatalog.ExceptionRead)]
    public async Task<IActionResult> GetAsync(long id)
    {
        var e = await _svc.GetAsync(id);
        return e == null ? NotFound() : Ok(e);
    }

    [HttpPost("{id:long}/attachments")]
    [S8Permission(S8PermissionCatalog.ExceptionCreate)]
    public async Task<IActionResult> AttachmentsAsync(long id, [FromBody] AdoS8AttachmentCreateDto dto)
    {
        try { return Ok(await _svc.AddAttachmentAsync(id, dto)); }
        catch (S8NotFoundException) { return NotFound(); }
        catch (S8BizException ex) { return BadRequest(new { message = ex.Message }); }
    }
}