feat(api): .NET 10 multi-tenant REST API

Full backend implementation:
- Multi-tenant cafe/restaurant management (menus, orders, tables, staff)
- POS order flow with ZarinPal and Snappfood payment integration
- OTP authentication via Kavenegar SMS
- QR digital menu with public discover/finder endpoints
- Customer loyalty, coupons, CRM
- PostgreSQL via EF Core, Redis for caching/sessions
- Background jobs, webhook handlers
- Full migration history

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
soroush.asadi
2026-05-27 21:33:48 +03:30
parent 03376b3ea1
commit ef15fd6247
472 changed files with 120358 additions and 0 deletions
@@ -0,0 +1,140 @@
using Microsoft.AspNetCore.Mvc;
using Meezi.API.Services;
using Meezi.Core.Interfaces;
using Meezi.Shared;
namespace Meezi.API.Controllers;
[Route("api/cafes/{cafeId}/inventory")]
public class InventoryController : CafeApiControllerBase
{
private readonly IInventoryService _inventory;
public InventoryController(IInventoryService inventory) => _inventory = inventory;
[HttpGet("ingredients")]
public async Task<IActionResult> List(string cafeId, ITenantContext tenant, CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
var data = await _inventory.ListAsync(cafeId, ct);
return Ok(new ApiResponse<object>(true, data));
}
[HttpGet("low-stock")]
public async Task<IActionResult> LowStock(string cafeId, ITenantContext tenant, CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
var data = await _inventory.LowStockAsync(cafeId, ct);
return Ok(new ApiResponse<object>(true, data));
}
[HttpPost("ingredients")]
public async Task<IActionResult> Create(
string cafeId,
[FromBody] CreateIngredientRequest request,
ITenantContext tenant,
CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
if (string.IsNullOrWhiteSpace(request.Name))
return BadRequest(new ApiResponse<object>(false, null, new ApiError("VALIDATION_ERROR", "Name is required.")));
if (request.QuantityOnHand > 0 && request.TotalPaidToman > 0 && string.IsNullOrWhiteSpace(request.BranchId))
return BadRequest(new ApiResponse<object>(false, null,
new ApiError("BRANCH_ID_REQUIRED", "Branch is required when recording purchase cost.")));
var created = await _inventory.CreateAsync(cafeId, request, ct);
return Ok(new ApiResponse<object>(true, created));
}
[HttpPatch("ingredients/{ingredientId}")]
public async Task<IActionResult> Update(
string cafeId,
string ingredientId,
[FromBody] UpdateIngredientRequest request,
ITenantContext tenant,
CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
var updated = await _inventory.UpdateAsync(cafeId, ingredientId, request, ct);
if (updated is null) return NotFoundError();
return Ok(new ApiResponse<object>(true, updated));
}
[HttpPost("ingredients/{ingredientId}/adjust")]
public async Task<IActionResult> Adjust(
string cafeId,
string ingredientId,
[FromBody] AdjustStockRequest request,
ITenantContext tenant,
CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
try
{
var updated = await _inventory.AdjustAsync(cafeId, ingredientId, request, tenant.UserId, ct);
if (updated is null) return NotFoundError();
return Ok(new ApiResponse<object>(true, updated));
}
catch (InvalidOperationException ex) when (ex.Message is "TOTAL_PAID_REQUIRED" or "BRANCH_ID_REQUIRED")
{
return BadRequest(new ApiResponse<object>(false, null,
new ApiError(ex.Message, ex.Message switch
{
"TOTAL_PAID_REQUIRED" => "Enter total paid for stock received.",
_ => "Branch is required for purchase cost."
})));
}
}
[HttpGet("purchases")]
public async Task<IActionResult> PurchasesSummary(
string cafeId,
[FromQuery] string branchId,
[FromQuery] DateOnly? from,
[FromQuery] DateOnly? to,
ITenantContext tenant,
CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
if (string.IsNullOrWhiteSpace(branchId))
return BadRequest(new ApiResponse<object>(false, null,
new ApiError("BRANCH_ID_REQUIRED", "branchId is required.")));
var today = DateOnly.FromDateTime(DateTime.UtcNow);
var summary = await _inventory.GetPurchasesSummaryAsync(
cafeId,
branchId,
from ?? today.AddDays(-30),
to ?? today,
ct);
return Ok(new ApiResponse<object>(true, summary));
}
[HttpGet("menu-items/{menuItemId}/recipe")]
public async Task<IActionResult> GetRecipe(
string cafeId,
string menuItemId,
ITenantContext tenant,
CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
var recipe = await _inventory.GetRecipeAsync(cafeId, menuItemId, ct);
if (recipe is null) return NotFoundError("Menu item not found.");
return Ok(new ApiResponse<object>(true, recipe));
}
[HttpPut("menu-items/{menuItemId}/recipe")]
public async Task<IActionResult> SetRecipe(
string cafeId,
string menuItemId,
[FromBody] SetMenuItemRecipeRequest request,
ITenantContext tenant,
CancellationToken ct)
{
if (EnsureCafeAccess(cafeId, tenant) is { } denied) return denied;
var recipe = await _inventory.SetRecipeAsync(cafeId, menuItemId, request, ct);
if (recipe is null) return NotFoundError("Menu item not found.");
return Ok(new ApiResponse<object>(true, recipe));
}
}