Assist_Design/apps/bff/src/modules/users/users.controller.ts

import {
  Controller,
  Get,
  Patch,
  Body,
  Req,
  UseInterceptors,
  ClassSerializerInterceptor,
  UsePipes,
} from "@nestjs/common";
import { UsersService } from "./users.service";
import { ApiTags, ApiOperation, ApiResponse, ApiBearerAuth } from "@nestjs/swagger";
import { ZodValidationPipe } from "@bff/core/validation";
import { 
  updateProfileRequestSchema,
  updateAddressRequestSchema,
  type UpdateProfileRequest,
  type UpdateAddressRequest
} from "@customer-portal/domain";
import type { RequestWithUser } from "@bff/modules/auth/auth.types";

@ApiTags("users")
@Controller("me")
@ApiBearerAuth()
@UseInterceptors(ClassSerializerInterceptor)
export class UsersController {
  constructor(private usersService: UsersService) {}

  @Get()
  @ApiOperation({ summary: "Get current user profile" })
  @ApiResponse({ status: 200, description: "User profile retrieved successfully" })
  @ApiResponse({ status: 401, description: "Unauthorized" })
  async getProfile(@Req() req: RequestWithUser) {
    return this.usersService.findById(req.user.id);
  }

  @Get("summary")
  @ApiOperation({ summary: "Get user dashboard summary" })
  @ApiResponse({ status: 200, description: "User summary retrieved successfully" })
  @ApiResponse({ status: 401, description: "Unauthorized" })
  async getSummary(@Req() req: RequestWithUser) {
    return this.usersService.getUserSummary(req.user.id);
  }

  @Patch()
  @UsePipes(new ZodValidationPipe(updateProfileRequestSchema))
  @ApiOperation({ summary: "Update user profile" })
  @ApiResponse({ status: 200, description: "Profile updated successfully" })
  @ApiResponse({ status: 400, description: "Invalid input data" })
  @ApiResponse({ status: 401, description: "Unauthorized" })
  async updateProfile(@Req() req: RequestWithUser, @Body() updateData: UpdateProfileRequest) {
    return this.usersService.update(req.user.id, updateData);
  }

  @Get("address")
  @ApiOperation({ summary: "Get mailing address" })
  @ApiResponse({ status: 200, description: "Address retrieved successfully" })
  @ApiResponse({ status: 401, description: "Unauthorized" })
  async getAddress(@Req() req: RequestWithUser) {
    return this.usersService.getAddress(req.user.id);
  }

  // Removed PATCH /me/billing in favor of PATCH /me/address to keep address updates explicit.

  @Patch("address")
  @UsePipes(new ZodValidationPipe(updateAddressRequestSchema))
  @ApiOperation({ summary: "Update mailing address" })
  @ApiResponse({ status: 200, description: "Address updated successfully" })
  @ApiResponse({ status: 400, description: "Invalid input data" })
  @ApiResponse({ status: 401, description: "Unauthorized" })
  async updateAddress(@Req() req: RequestWithUser, @Body() address: UpdateAddressRequest) {
    await this.usersService.updateAddress(req.user.id, address);
    // Return fresh address snapshot
    return this.usersService.getAddress(req.user.id);
  }
}