<?php

use App\Modules\Identity\Http\RequireCompanyContext;
use App\Modules\Identity\Http\RequireValidSession;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;
use Tempo\Purchasing\SgfCandidate\Controller;

// Required only by the isolated candidate harness; never by normal destination routes.
Route::middleware(['web', 'auth', RequireValidSession::class, RequireCompanyContext::class])->group(function () {
    Route::get('/purchasing/internal-requisitions', [Controller::class, 'page']);
    Route::get('/purchasing/internal-requisitions/screen.mjs', [Controller::class, 'script']);
    Route::get('/api/internal-requisitions', [Controller::class, 'index']);
    Route::get('/api/internal-requisitions/{id}', [Controller::class, 'show'])->whereNumber('id');
    Route::post('/api/internal-requisitions/policy', [Controller::class, 'configure']);
    Route::post('/api/internal-requisitions/save', [Controller::class, 'command'])->defaults('action', 'save');
    Route::post('/api/internal-requisitions/{id}/{action}', fn (Request $r, int $id, string $action) => (new Controller)->command($r, $action, $id))->whereNumber('id')->whereIn('action', ['save', 'submit', 'decide']);
});