panels-origin/api/payroll_http.ts

import type { Context, Hono } from "hono";
import type { AuthUser } from "./auth.ts";
import { tenantScope } from "./auth.ts";
import { requireCoreAuth } from "./scope.ts";
import { lastInsertId, projectById, projectMustBe, type Db } from "./db.ts";
import { generateLoanReceiptPdf } from "./pdf.ts";
import { fullName } from "./mx.ts";
import {
  addAdminLine,
  addJornalWorker,
  addUnit,
  assembleWeek,
  createDestajoJob,
  createLoan,
  getSettings,
  getWeekBundle,
  listOpenWeeks,
  listUnits,
  moneyLabel,
  payWeek,
  patchDestajoCut,
  removeAdminLine,
  resolveToday,
  saveSettings,
  setAttendance,
  tenantKey,
  updateAdminLine,
  weekContaining,
  weekCsv,
} from "./payroll.ts";

type App = Hono<{ Variables: { user: AuthUser; db: Db } }>;

function tid(c: { get: (k: "user") => AuthUser }): number {
  return tenantKey(tenantScope(c.get("user")));
}

function pdfBody(c: Context, bytes: Uint8Array, filename: string) {
  c.header("Content-Type", "application/pdf");
  c.header("Content-Disposition", `attachment; filename="${filename}"`);
  return c.body(bytes.buffer as ArrayBuffer);
}

export function registerPayrollRoutes(app: App) {
  app.get("/v1/attendance", ...requireCoreAuth, async (c) => {
    const projectId = Number(c.req.query("project_id"));
    const from = c.req.query("from") ?? "";
    const to = c.req.query("to") ?? "";
    const db = c.get("db");
    const rows = await db.prepare(
      `SELECT a.*, w.first_name, w.last_name_p FROM attendance a
       JOIN workers w ON w.id=a.worker_id
       WHERE a.project_id=? AND a.work_date BETWEEN ? AND ?
       ORDER BY a.work_date, w.last_name_p`,
    ).all(projectId, from, to);
    return c.json({ attendance: rows });
  });

  app.put("/v1/attendance", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{
      project_id: number;
      worker_id: number;
      work_date: string;
      present: boolean;
    }>();
    const db = c.get("db");
    const blocked = projectMustBe(
      await projectById(db, body.project_id),
      ["activo", "pausado"],
      "No se registra asistencia en un proyecto concluido o cancelado",
    );
    if (blocked) return c.json({ error: blocked.error }, blocked.status);
    const result = await setAttendance(db, tid(c), body);
    if ("error" in result) {
      return c.json({ error: result.error, other: result.other }, result.status === 409 ? 409 : 400);
    }
    return c.json({ ok: true });
  });

  app.get("/v1/payroll/settings", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    const tenantId = tid(c);
    return c.json({ settings: await getSettings(db, tenantId), units: await listUnits(db, tenantId) });
  });

  app.patch("/v1/payroll/settings", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    const body = await c.req.json<{
      loan_commission_enabled?: number | boolean;
      loan_commission_pct?: number;
      loan_small_max?: number;
    }>();
    const settings = await saveSettings(db, tid(c), {
      loan_commission_enabled: body.loan_commission_enabled === undefined
        ? undefined
        : Boolean(body.loan_commission_enabled),
      loan_commission_pct: body.loan_commission_pct,
      loan_small_max: body.loan_small_max,
    });
    return c.json({ settings });
  });

  app.post("/v1/destajo/units", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{ code: string; label?: string }>();
    const db = c.get("db");
    try {
      const id = await addUnit(db, tid(c), body.code, body.label ?? body.code);
      return c.json({ id }, 201);
    } catch (e) {
      return c.json({ error: e instanceof Error ? e.message : "No se pudo guardar" }, 400);
    }
  });

  app.get("/v1/loans", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    const workerId = c.req.query("worker_id");
    const sql = workerId
      ? "SELECT l.*, w.first_name, w.last_name_p FROM loans l JOIN workers w ON w.id=l.worker_id WHERE l.worker_id=? ORDER BY l.id DESC"
      : "SELECT l.*, w.first_name, w.last_name_p FROM loans l JOIN workers w ON w.id=l.worker_id ORDER BY l.id DESC";
    const loans = workerId ? await db.prepare(sql).all(Number(workerId)) : await db.prepare(sql).all();
    return c.json({ loans });
  });

  app.post("/v1/loans", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{
      worker_id: number;
      amount?: number;
      delivered?: number;
      weekly_payment?: number;
      note?: string;
      commission_enabled?: boolean;
      commission_pct?: number;
      plan?: "single" | "installments";
      installments_n?: number;
    }>();
    const db = c.get("db");
    try {
      const created = await createLoan(db, tid(c), {
        worker_id: body.worker_id,
        delivered: Number(body.delivered ?? body.amount ?? 0),
        commission_enabled: body.commission_enabled,
        commission_pct: body.commission_pct,
        plan: body.plan,
        installments_n: body.installments_n,
        note: body.note,
      });
      return c.json(created, 201);
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.get("/v1/loans/:id/recibo", ...requireCoreAuth, async (c) => {
    const id = Number(c.req.param("id"));
    const db = c.get("db");
    const loan = await db.prepare(
      `SELECT l.*, w.first_name, w.middle_name, w.last_name_p, w.last_name_m
       FROM loans l JOIN workers w ON w.id=l.worker_id WHERE l.id=?`,
    ).get(id) as {
      delivered: number;
      commission_pct: number;
      commission_amount: number;
      balance: number;
      weekly_payment: number;
      plan: string;
      installments_n: number;
      first_due: string;
      created_at: string;
      first_name: string;
      middle_name: string | null;
      last_name_p: string;
      last_name_m: string;
      note: string | null;
    } | undefined;
    if (!loan) return c.json({ error: "Préstamo no encontrado" }, 404);
    const bytes = await generateLoanReceiptPdf({
      title: "Recibo de aceptación de préstamo",
      subtitle: `Registrado ${String(loan.created_at).slice(0, 10)}`,
      person: fullName(loan),
      lines: [
        { label: "Entregado", value: moneyLabel(loan.delivered) },
        {
          label: "Comisión",
          value: loan.commission_pct > 0
            ? `${loan.commission_pct}% · ${moneyLabel(loan.commission_amount)}`
            : "Sin comisión",
        },
        { label: "Saldo a descontar", value: moneyLabel(loan.delivered + loan.commission_amount) },
        {
          label: "Plan",
          value: loan.plan === "installments" ? `${loan.installments_n} cuotas` : "1 exhibición",
        },
        { label: "Primer descuento", value: loan.first_due || "—" },
        { label: "Abono", value: moneyLabel(loan.weekly_payment) },
        { label: "Nota", value: loan.note || "—" },
      ],
    });
    return pdfBody(c, bytes, `prestamo-aceptacion-${id}.pdf`);
  });

  app.get("/v1/loan-payments/:id/recibo", ...requireCoreAuth, async (c) => {
    const id = Number(c.req.param("id"));
    const db = c.get("db");
    const pay = await db.prepare(
      `SELECT p.*, l.delivered, l.commission_pct, w.first_name, w.middle_name, w.last_name_p, w.last_name_m, wk.week_end
       FROM loan_payments p
       JOIN loans l ON l.id=p.loan_id
       JOIN workers w ON w.id=l.worker_id
       JOIN payroll_weeks wk ON wk.id=p.week_id
       WHERE p.id=?`,
    ).get(id) as {
      amount: number;
      installment_n: number;
      label: string;
      delivered: number;
      commission_pct: number;
      first_name: string;
      middle_name: string | null;
      last_name_p: string;
      last_name_m: string;
      week_end: string;
    } | undefined;
    if (!pay) return c.json({ error: "Recibo no encontrado" }, 404);
    const bytes = await generateLoanReceiptPdf({
      title: "Recibo de pago de préstamo",
      subtitle: `Descuento del sábado ${pay.week_end}`,
      person: fullName(pay),
      lines: [
        { label: "Descuento", value: moneyLabel(pay.amount) },
        { label: "Exhibición", value: String(pay.installment_n) },
        { label: "Condiciones", value: pay.label || "—" },
      ],
    });
    return pdfBody(c, bytes, `prestamo-pago-${id}.pdf`);
  });

  app.get("/v1/payroll/weeks", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    const tenantId = tid(c);
    const start = c.req.query("week_start") || weekContaining(await resolveToday(db, tenantId)).weekStart;
    const bundle = await getWeekBundle(db, tenantId, start);
    return c.json(bundle);
  });

  app.get("/v1/payroll/weeks/open", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    return c.json({ weeks: await listOpenWeeks(db, tid(c)) });
  });

  app.post("/v1/payroll/weeks/:id/assemble", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    try {
      const nowIso = await resolveToday(db, tid(c));
      await assembleWeek(db, Number(c.req.param("id")), nowIso);
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.post("/v1/payroll/weeks/:id/pay", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    try {
      const nowIso = await resolveToday(db, tid(c));
      await payWeek(db, Number(c.req.param("id")), nowIso);
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.get("/v1/payroll/weeks/:id/csv", ...requireCoreAuth, async (c) => {
    const id = Number(c.req.param("id"));
    const db = c.get("db");
    const csv = await weekCsv(db, id);
    c.header("Content-Type", "text/csv; charset=utf-8");
    c.header("Content-Disposition", `attachment; filename="nomina-${id}.csv"`);
    return c.body(csv);
  });

  app.post("/v1/payroll/weeks/:id/jornal", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{ project_id: number; worker_id: number }>();
    const db = c.get("db");
    try {
      await addJornalWorker(db, Number(c.req.param("id")), body.project_id, body.worker_id);
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.post("/v1/payroll/weeks/:id/admin", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{ worker_id: number; amount: number; project_id?: number | null }>();
    const db = c.get("db");
    try {
      await addAdminLine(db, Number(c.req.param("id")), body);
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.patch("/v1/payroll/weeks/:id/admin/:lineId", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{ amount: number }>();
    const db = c.get("db");
    try {
      await updateAdminLine(db, Number(c.req.param("id")), Number(c.req.param("lineId")), body.amount);
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.delete("/v1/payroll/weeks/:id/admin/:lineId", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    try {
      await removeAdminLine(db, Number(c.req.param("id")), Number(c.req.param("lineId")));
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.post("/v1/destajo/jobs", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{
      week_id: number;
      project_id: number;
      worker_id: number;
      concepto: string;
      unit_code: string;
      qty_total_estimated: number;
      unit_price: number;
      qty_planned?: number;
      qty_extra?: number;
    }>();
    const db = c.get("db");
    try {
      const created = await createDestajoJob(db, tid(c), body.week_id, body);
      return c.json(created, 201);
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.patch("/v1/destajo/cuts/:id", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{
      week_id: number;
      qty_planned?: number;
      qty_actual?: number;
      qty_extra?: number;
    }>();
    const db = c.get("db");
    try {
      await patchDestajoCut(db, body.week_id, Number(c.req.param("id")), body);
      return c.json({ ok: true });
    } catch (e) {
      const err = e as Error & { status?: number };
      return c.json({ error: err.message }, err.status === 404 ? 404 : 400);
    }
  });

  app.post("/v1/payroll/periods", ...requireCoreAuth, async (c) => {
    const body = await c.req.json<{
      project_id: number;
      week_start: string;
      week_end: string;
      extra_discounts?: Record<number, number>;
    }>();
    const db = c.get("db");
    const blocked = projectMustBe(
      await projectById(db, body.project_id),
      ["activo", "pausado"],
      "No se genera nómina de un proyecto concluido o cancelado",
    );
    if (blocked) return c.json({ error: blocked.error }, blocked.status);
    await db.prepare(
      "INSERT INTO payroll_periods (project_id, week_start, week_end, status) VALUES (?, ?, ?, 'draft')",
    ).run(body.project_id, body.week_start, body.week_end);
    const periodId = await lastInsertId(db);
    const workers = await db.prepare(
      `SELECT w.id, w.daily_wage FROM workers w
       JOIN assignments a ON a.worker_id=w.id AND a.project_id=? AND a.active=true
       WHERE w.status='activo'`,
    ).all(body.project_id) as { id: number; daily_wage: number }[];
    const ins = db.prepare(
      `INSERT INTO payroll_lines (period_id, worker_id, days, daily_wage, gross, discounts, loan_payment, net)
       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,
    );
    for (const w of workers) {
      const att = await db.prepare(
        `SELECT COUNT(*) AS n FROM attendance
         WHERE worker_id=? AND project_id=? AND work_date BETWEEN ? AND ? AND present=true`,
      ).get(w.id, body.project_id, body.week_start, body.week_end) as { n: number };
      const days = Number(att.n);
      const gross = days * w.daily_wage;
      const extra = Number(body.extra_discounts?.[w.id] ?? 0);
      const net = gross - extra;
      await ins.run(periodId, w.id, days, w.daily_wage, gross, extra, 0, net);
    }
    return c.json({ id: periodId });
  });

  app.get("/v1/payroll/periods", ...requireCoreAuth, async (c) => {
    const db = c.get("db");
    const projectId = c.req.query("project_id");
    const sql = projectId
      ? `SELECT pe.*, p.name AS project_name FROM payroll_periods pe JOIN projects p ON p.id=pe.project_id WHERE pe.project_id=? ORDER BY pe.id DESC`
      : `SELECT pe.*, p.name AS project_name FROM payroll_periods pe JOIN projects p ON p.id=pe.project_id ORDER BY pe.id DESC`;
    const periods = projectId ? await db.prepare(sql).all(Number(projectId)) : await db.prepare(sql).all();
    return c.json({ periods });
  });

  app.get("/v1/payroll/periods/:id", ...requireCoreAuth, async (c) => {
    const id = Number(c.req.param("id"));
    const db = c.get("db");
    const period = await db.prepare(
      `SELECT pe.*, p.name AS project_name FROM payroll_periods pe JOIN projects p ON p.id=pe.project_id WHERE pe.id=?`,
    ).get(id);
    if (!period) return c.json({ error: "Periodo no encontrado" }, 404);
    const lines = await db.prepare(
      `SELECT l.*, w.first_name, w.last_name_p, w.position FROM payroll_lines l
       JOIN workers w ON w.id=l.worker_id WHERE l.period_id=? ORDER BY w.last_name_p`,
    ).all(id);
    return c.json({ period, lines });
  });

  app.get("/v1/payroll/periods/:id/csv", ...requireCoreAuth, async (c) => {
    const id = Number(c.req.param("id"));
    const db = c.get("db");
    const lines = await db.prepare(
      `SELECT w.first_name, w.last_name_p, l.days, l.daily_wage, l.gross, l.discounts, l.loan_payment, l.net
       FROM payroll_lines l JOIN workers w ON w.id=l.worker_id WHERE l.period_id=?`,
    ).all(id) as Record<string, unknown>[];
    const header = "Nombre,Apellido,Dias,Jornal,Bruto,Descuentos,Prestamo,Neto";
    const rows = lines.map((l) =>
      [l.first_name, l.last_name_p, l.days, l.daily_wage, l.gross, l.discounts, l.loan_payment, l.net].join(",")
    );
    const csv = [header, ...rows].join("\n");
    c.header("Content-Type", "text/csv; charset=utf-8");
    c.header("Content-Disposition", `attachment; filename="nomina-${id}.csv"`);
    return c.body(csv);
  });

  app.patch("/v1/payroll/periods/:id", ...requireCoreAuth, async (c) => {
    const id = Number(c.req.param("id"));
    const { status } = await c.req.json<{ status: string }>();
    const db = c.get("db");
    await db.prepare("UPDATE payroll_periods SET status=? WHERE id=?").run(status, id);
    return c.json({ ok: true });
  });
}