u

src/api/routes/quote.js

@@ -1,4 +1,5 @@
 import * as db from '../../db/quote.js';
+import { createAndAttachManifestPdf } from '../../services/manifestPdf.js';
 
 // #region Helpers
 
@@ -15,11 +16,16 @@ function quoteErrorStatus(error) {
     if (error.message === 'Not authorized') return 403;
     if (error.message === 'Company not found') return 404;
     if (error.message === 'Quote not found') return 404;
+    if (error.message === 'Manifest not found') return 404;
+    if (error.message === 'Attachment not found') return 404;
     if (error.message === 'Entity not found') return 404;
     if (error.message === 'Article not found') return 404;
     if (error.message === 'Invalid entityId') return 400;
     if (error.message === 'Invalid quote') return 400;
     if (error.message === 'Invalid lines') return 400;
+    if (error.message === 'File name required') return 400;
+    if (error.message === 'Mimetype required') return 400;
+    if (error.message === 'Content required') return 400;
     if (error.message?.includes('parent article') || error.message?.includes('A parent article')) return 400;
     return 500;
 }
@@ -546,4 +552,210 @@ export function register(app, basePath = '') {
     });
 
     // #endregion
+
+    /**
+     * @openapi
+     * /quote/{id}/pdf:
+     *   post:
+     *     tags: [Quote]
+     *     summary: Generate and attach quote PDF
+     *     description: |
+     *       Generates an A4 PDF document for the quote with prices, net sum, and tax breakdown.
+     *       Stores the PDF as a `manifestattachment` for printing or downloading.
+     *     security:
+     *       - cookieAuth: []
+     *     x-signals: [quote]
+     *     parameters:
+     *       - in: path
+     *         name: id
+     *         required: true
+     *         schema:
+     *           type: integer
+     *         description: Quote ID
+     *     responses:
+     *       201:
+     *         description: PDF generated and attached to quote
+     *         content:
+     *           application/json:
+     *             schema:
+     *               type: object
+     *               required: [attachment, fileUrl]
+     *               properties:
+     *                 attachment:
+     *                   $ref: '#/components/schemas/DeliveryFile'
+     *                 fileUrl:
+     *                   type: string
+     *                   example: /quote/1/file/5
+     *       400:
+     *         description: Invalid ID or no company selected
+     *         content:
+     *           application/json:
+     *             schema:
+     *               $ref: '#/components/schemas/Error'
+     *       401:
+     *         description: Unauthorized
+     *         content:
+     *           application/json:
+     *             schema:
+     *               $ref: '#/components/schemas/Error'
+     *       403:
+     *         description: Not authorized
+     *         content:
+     *           application/json:
+     *             schema:
+     *               $ref: '#/components/schemas/Error'
+     *       404:
+     *         description: Quote not found
+     *         content:
+     *           application/json:
+     *             schema:
+     *               $ref: '#/components/schemas/Error'
+     */
+    // #region POST /quote/:id/pdf
+
+    app.post(`${basePath}/quote/:id/pdf`, async (req, res) => {
+        const selected = requireSelectedCompany(req);
+        if (selected.error) {
+            return res.status(400).json({ error: selected.error });
+        }
+
+        const id = Number(req.params.id);
+        if (!Number.isInteger(id) || id <= 0) {
+            return res.status(400).json({ error: 'id is required' });
+        }
+
+        try {
+            const { attachment } = await createAndAttachManifestPdf(
+                req.user.id,
+                selected.companyId,
+                id,
+                'quote'
+            );
+
+            res.status(201).json({
+                attachment,
+                fileUrl: `/quote/${id}/file/${attachment.fileId}`,
+            });
+        } catch (error) {
+            const status = quoteErrorStatus(error);
+            if (status === 500) console.error('Create quote PDF failed:', error);
+            res.status(status).json({ error: error.message });
+        }
+    });
+
+    // #endregion
+
+    /**
+     * @openapi
+     * /quote/{id}/file/{fileId}:
+     *   get:
+     *     tags: [Quote]
+     *     summary: Get quote attachment file content
+     *     description: |
+     *       Returns the full binary content of an attached file (e.g. quote PDF)
+     *       for the specified quote. Supports HTTP caching via ETag (SHA-256 hash) and 304 Not Modified.
+     *     security:
+     *       - cookieAuth: []
+     *     parameters:
+     *       - in: path
+     *         name: id
+     *         required: true
+     *         schema:
+     *           type: integer
+     *         description: Quote ID
+     *       - in: path
+     *         name: fileId
+     *         required: true
+     *         schema:
+     *           type: integer
+     *         description: File ID or attachment ID
+     *       - in: query
+     *         name: download
+     *         required: false
+     *         schema:
+     *           type: boolean
+     *         description: When true, sets Content-Disposition to attachment instead of inline
+     *     responses:
+     *       200:
+     *         description: Binary file content
+     *         content:
+     *           application/pdf:
+     *             schema:
+     *               type: string
+     *               format: binary
+     *           application/octet-stream:
+     *             schema:
+     *               type: string
+     *               format: binary
+     *       304:
+     *         description: Not modified
+     *       400:
+     *         description: Invalid ID or no company selected
+     *         content:
+     *           application/json:
+     *             schema:
+     *               $ref: '#/components/schemas/Error'
+     *       404:
+     *         description: Quote or file not found
+     *         content:
+     *           application/json:
+     *             schema:
+     *               $ref: '#/components/schemas/Error'
+     */
+    // #region GET /quote/:id/file/:fileId
+
+    app.get(`${basePath}/quote/:id/file/:fileId`, async (req, res) => {
+        const selected = requireSelectedCompany(req);
+        if (selected.error) {
+            return res.status(400).json({ error: selected.error });
+        }
+
+        const id = Number(req.params.id);
+        if (!Number.isInteger(id) || id <= 0) {
+            return res.status(400).json({ error: 'id is required' });
+        }
+
+        const fileId = Number(req.params.fileId);
+        if (!Number.isInteger(fileId) || fileId <= 0) {
+            return res.status(400).json({ error: 'fileId is required' });
+        }
+
+        try {
+            const attachment = await db.getFile(req.user.id, id, fileId);
+
+            if (attachment.hash) {
+                const etag = `"${attachment.hash}"`;
+                res.setHeader('ETag', etag);
+                const ifNoneMatch = req.headers['if-none-match'];
+                if (ifNoneMatch === etag || ifNoneMatch === attachment.hash) {
+                    return res.status(304).end();
+                }
+            }
+
+            const isDownload = req.query.download === '1' || req.query.download === 'true';
+            const dispositionType = isDownload ? 'attachment' : 'inline';
+            const filename = attachment.name || `file-${attachment.fileId}`;
+            const asciiName = filename.replace(/["\r\n\\]/g, '_');
+            const encodedName = encodeURIComponent(filename).replace(/['()]/g, escape);
+
+            res.setHeader('Content-Type', attachment.mimetype || 'application/octet-stream');
+            res.setHeader('Content-Disposition', `${dispositionType}; filename="${asciiName}"; filename*=UTF-8''${encodedName}`);
+            res.setHeader('Cache-Control', 'private, max-age=86400');
+
+            if (attachment.content && Buffer.isBuffer(attachment.content)) {
+                res.setHeader('Content-Length', String(attachment.content.length));
+                return res.status(200).send(attachment.content);
+            } else {
+                const buffer = Buffer.from(attachment.content || '');
+                res.setHeader('Content-Length', String(buffer.length));
+                return res.status(200).send(buffer);
+            }
+        } catch (error) {
+            const status = quoteErrorStatus(error);
+            if (status === 500) console.error('Get quote file failed:', error);
+            res.status(status).json({ error: error.message });
+        }
+    });
+
+    // #endregion
 }