tehran_taj/apps/user-app-v2/src/api/client.ts

import type { CreateOrderDto } from '@gold-bank/shared-types';

const BASE = '/api';
const TOKEN_KEY = 'gold-bank:token';

/**
 * Called when the API rejects our token. Wired up in main.ts rather than
 * imported from the store, so this module stays free of a Pinia dependency
 * (the client is used before Pinia is active during app bootstrap).
 */
let onUnauthorized: (() => void) | null = null;
export function setUnauthorizedHandler(fn: () => void) {
  onUnauthorized = fn;
}

/** Thrown for a 401 so callers can tell "session gone" from any other failure. */
export class UnauthorizedError extends Error {
  constructor(path: string) {
    super(`API ${path} rejected the session (401)`);
    this.name = 'UnauthorizedError';
  }
}

function readToken(): string | null {
  try {
    return localStorage.getItem(TOKEN_KEY);
  } catch {
    // Private mode / blocked storage — treat as logged out rather than throwing.
    return null;
  }
}

async function request<T>(path: string, options?: RequestInit): Promise<T> {
  const token = readToken();

  const res = await fetch(`${BASE}${path}`, {
    ...options,
    headers: {
      'Content-Type': 'application/json',
      // Customer JWT from POST /customer/auth/verify-otp. The API derives the
      // customer from this, never from an id in the URL.
      ...(token ? { Authorization: `Bearer ${token}` } : {}),
      ...options?.headers,
    },
  });

  if (res.status === 401) {
    // Expired or revoked: drop the session and send the user to login, so no
    // stale personal data stays on screen behind a dead token.
    onUnauthorized?.();
    throw new UnauthorizedError(path);
  }

  if (!res.ok) {
    const body = await res.text();
    throw new Error(`API ${path} failed (${res.status}): ${body}`);
  }
  return res.json();
}

export interface ProductVariantSummary {
  id: string;
  title: string;
  rashWeightGrams: string;
  defaultWagePercent: string;
  /// On-hand stock and the "orderable at zero stock" flag. Both exist on
  /// ProductVariant and are already returned by GET /catalog/products (the
  /// catalog service includes every variant field) — declared here so the UI
  /// can read them.
  qty?: number;
  isPreOrder?: boolean;
}

export interface CategorySummary {
  id: string;
  title: string;
  parentId: string | null;
}

export interface BrandSummary {
  id: string;
  title: string;
}

export interface CollectionSummary {
  id: string;
  title: string;
  description: string | null;
  isActive: boolean;
}

export interface ProductSummary {
  id: string;
  title: string;
  description: string | null;
  /// Legacy Product.product_code — the human-facing code. Already returned by
  /// GET /catalog/products.
  productCode?: string | null;
  variants: ProductVariantSummary[];
  images: Array<{ url: string }>;
  category: CategorySummary | null;
  brand: BrandSummary | null;
  collections: Array<{ collectionId: string; collection: CollectionSummary }>;
}

export interface LedgerEntrySummary {
  id: string;
  currency: string;
  direction: string;
  sourceType: string;
  amount: string;
  confirmed: boolean;
  createdAt: string;
  note: string | null;
}

export interface OrderSummary {
  id: string;
  orderNumber: string;
  status: string;
  totalGoldWeightGrams: string;
  isSuspendedOverCreditLimit: boolean;
}

export interface OrderItemDetail {
  id: string;
  productVariantId: string;
  quantity: number;
  rashWeightGramsSnapshot: string;
  wagePercentSnapshot: string;
  discountPercentSnapshot: string;
  computedWeightGrams: string;
  flatRialCharge: string;
}

export interface OrderDetail {
  id: string;
  orderNumber: string;
  status: string;
  totalGoldWeightGrams: string;
  wageWeightGrams: string;
  flatRialCharge: string;
  isSuspendedOverCreditLimit: boolean;
  deliveredAt: string | null;
  createdAt: string;
  items: OrderItemDetail[];
}

export interface CustomerDetail {
  id: string;
  fullName: string;
  mobile: string;
  nationalCode: string;
  cityId: string | null;
  goldCreditLimitGrams: string;
  goldDebtGrams: string;
  fiatDebtRial: string;
  verificationStep: string;
  createdAt: string;
}

export interface GoldPriceQuote {
  id: string;
  karatPerMille: number;
  pricePerGramRial: string;
  source: string;
  quotedAt: string;
}

export const api = {
  listProducts: () => request<ProductSummary[]>('/catalog/products'),
  /**
   * Step 1 of login — ports henza_server ApiMobileController::userAuth.
   * Always resolves `{ sent: true }`, even for an unregistered number, so the
   * endpoint cannot be used to discover which numbers are customers.
   */
  requestOtp: (username: string) =>
    request<{ sent: boolean }>('/customer/auth/request-otp', {
      method: 'POST',
      body: JSON.stringify({ username }),
    }),

  /**
   * Step 2 — ports ApiMobileController::userVerfiy. The server compares the
   * code and returns a token plus that one customer. A wrong, expired or
   * already-used code is a 401.
   */
  verifyOtp: (username: string, password: string) =>
    request<{ token: string; customer: { id: string; mobile: string } }>(
      '/customer/auth/verify-otp',
      { method: 'POST', body: JSON.stringify({ username, password }) },
    ),

  // The three reads below identify the customer by TOKEN. They replaced
  // /customers/:id, /:id/orders and /:id/ledger-entries, which took the id from
  // the URL and let anyone read anyone (SEC-08).
  getMe: () => request<CustomerDetail>('/customer/me'),
  getMyOrders: () => request<OrderDetail[]>('/customer/me/orders'),
  getMyLedgerEntries: () => request<LedgerEntrySummary[]>('/customer/me/ledger-entries'),
  createOrder: (dto: CreateOrderDto) => request<OrderSummary>('/orders', { method: 'POST', body: JSON.stringify(dto) }),
  getLatestGoldPrice: (karatPerMille = 750) => request<GoldPriceQuote>(`/pricing/latest?karatPerMille=${karatPerMille}`),
};