DriverVault/API Server/internal/api/parts.go

package api

import (
	"encoding/json"
	"fmt"
	"net/http"
	"net/url"

	"drivervault/apiserver/internal/models"
)

func (s *Server) listParts(w http.ResponseWriter, r *http.Request) {
	carID := r.URL.Query().Get("car")
	if !s.requireCarAccess(w, r, carID, accessRead) {
		return
	}
	q := url.Values{}
	q.Set("sort", "name")
	q.Set("perPage", "500")
	q.Set("filter", fmt.Sprintf("car='%s'", carID))
	s.respondPartList(w, r, q)
}

// listCarParts serves GET /api/cars/{id}/parts.
func (s *Server) listCarParts(w http.ResponseWriter, r *http.Request) {
	carID := r.PathValue("id")
	if !s.requireCarAccess(w, r, carID, accessRead) {
		return
	}
	q := url.Values{}
	q.Set("sort", "name")
	q.Set("perPage", "500")
	q.Set("filter", fmt.Sprintf("car='%s'", carID))
	s.respondPartList(w, r, q)
}

func (s *Server) respondPartList(w http.ResponseWriter, r *http.Request, q url.Values) {
	res, err := s.pb.List(r.Context(), colParts, q)
	if err != nil {
		writePBError(w, err)
		return
	}
	var recs []partRecord
	if err := json.Unmarshal(res.Items, &recs); err != nil {
		writeError(w, http.StatusInternalServerError, err.Error())
		return
	}
	out := make([]models.Part, 0, len(recs))
	for _, rec := range recs {
		out = append(out, rec.toModel())
	}
	writeJSON(w, http.StatusOK, out)
}

func (s *Server) getPart(w http.ResponseWriter, r *http.Request) {
	var rec partRecord
	if err := s.pb.GetOne(r.Context(), colParts, r.PathValue("id"), &rec); err != nil {
		writePBError(w, err)
		return
	}
	if !s.requireCarAccess(w, r, rec.Car, accessRead) {
		return
	}
	writeJSON(w, http.StatusOK, rec.toModel())
}

func (s *Server) createPart(w http.ResponseWriter, r *http.Request) {
	var in models.Part
	if err := decodeJSON(r, &in); err != nil {
		writeError(w, http.StatusBadRequest, err.Error())
		return
	}
	if in.Car == "" || in.Name == "" {
		writeError(w, http.StatusBadRequest, "car and name are required")
		return
	}
	if !s.requireCarAccess(w, r, in.Car, accessWrite) {
		return
	}
	var rec partRecord
	if err := s.pb.Create(r.Context(), colParts, partPayload(in), &rec); err != nil {
		writePBError(w, err)
		return
	}
	writeJSON(w, http.StatusCreated, rec.toModel())
}

func (s *Server) updatePart(w http.ResponseWriter, r *http.Request) {
	var in models.Part
	if err := decodeJSON(r, &in); err != nil {
		writeError(w, http.StatusBadRequest, err.Error())
		return
	}
	var existing partRecord
	if err := s.pb.GetOne(r.Context(), colParts, r.PathValue("id"), &existing); err != nil {
		writePBError(w, err)
		return
	}
	if !s.requireCarAccess(w, r, existing.Car, accessWrite) {
		return
	}
	var rec partRecord
	if err := s.pb.Update(r.Context(), colParts, r.PathValue("id"), partPayload(in), &rec); err != nil {
		writePBError(w, err)
		return
	}
	writeJSON(w, http.StatusOK, rec.toModel())
}

func (s *Server) deletePart(w http.ResponseWriter, r *http.Request) {
	var existing partRecord
	if err := s.pb.GetOne(r.Context(), colParts, r.PathValue("id"), &existing); err != nil {
		writePBError(w, err)
		return
	}
	if !s.requireCarAccess(w, r, existing.Car, accessWrite) {
		return
	}
	if err := s.pb.Delete(r.Context(), colParts, r.PathValue("id")); err != nil {
		writePBError(w, err)
		return
	}
	w.WriteHeader(http.StatusNoContent)
}