ladill-pos/routes/web.php

<?php

use App\Http\Controllers\Auth\SsoLoginController;
use App\Http\Controllers\AccountSwitchController;
use App\Http\Controllers\Pos\AiController;
use App\Http\Controllers\Pos\LocationController;
use App\Http\Controllers\Pos\MemberController;
use App\Http\Controllers\Pos\DashboardController;
use App\Http\Controllers\Pos\KitchenController;
use App\Http\Controllers\Pos\MenuController;
use App\Http\Controllers\Pos\ProductController;
use App\Http\Controllers\Pos\ProController;
use App\Http\Controllers\Pos\CustomerDisplayController;
use App\Http\Controllers\Pos\DeviceController;
use App\Http\Controllers\Pos\RegisterController;
use App\Http\Controllers\Pos\SaleController;
use App\Http\Controllers\Pos\SettingsController;
use App\Http\Controllers\Pos\TableController;
use App\Http\Controllers\Pos\TicketController;
use App\Http\Controllers\NotificationController;
use App\Http\Controllers\Public\CustomerDisplayController as PublicCustomerDisplayController;
use App\Http\Controllers\Public\KitchenDisplayController as PublicKitchenDisplayController;
use App\Http\Controllers\Public\TableOrderController;
use App\Http\Controllers\WalletBalanceController;
use Illuminate\Support\Facades\Route;

Route::get('/', fn () => auth()->check()
    ? redirect()->route('pos.dashboard')
    : redirect()->route('sso.connect'))->name('pos.root');

Route::get('/login', [SsoLoginController::class, 'connect'])->name('login');
Route::get('/sso/connect', [SsoLoginController::class, 'connect'])->name('sso.connect');
Route::get('/sso/callback', [SsoLoginController::class, 'callback'])->name('sso.callback');
Route::post('/logout', [SsoLoginController::class, 'logout'])->name('logout');
Route::get('/sso/logout-bridge', [SsoLoginController::class, 'logoutBridge'])->name('sso.logout-bridge');
Route::get('/sso/logout-frontchannel', [SsoLoginController::class, 'frontchannelLogout'])->name('sso.logout-frontchannel');
Route::get('/sso/platform-signed-out', [SsoLoginController::class, 'platformSignedOut'])->name('sso.platform-signed-out');
Route::get('/signed-out', fn () => auth()->check() ? redirect()->route('pos.dashboard') : view('auth.signed-out'))->name('pos.signed-out');

Route::get('/sales/{sale}/callback', [SaleController::class, 'callback'])->name('pos.sales.callback');
Route::get('/payments/callback', [TicketController::class, 'paymentCallback'])->name('pos.payments.callback');

// Public table-QR ordering (no auth — scoped by the table short_code).
Route::get('/t/{code}', [TableOrderController::class, 'menu'])->name('pos.table.menu');
Route::post('/t/{code}/order', [TableOrderController::class, 'store'])->middleware('throttle:20,1')->name('pos.table.order');
Route::get('/t/{code}/done', [TableOrderController::class, 'confirmed'])->name('pos.table.confirmed');

// Customer-facing dual-screen display (token-gated; no operator chrome).
Route::get('/customer-display/{token}', [PublicCustomerDisplayController::class, 'show'])
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.customer-display.show');
Route::get('/customer-display/{token}/state', [PublicCustomerDisplayController::class, 'state'])
    ->middleware('throttle:120,1')
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.customer-display.state');
Route::get('/customer-display/{token}/stream', [PublicCustomerDisplayController::class, 'stream'])
    ->middleware('throttle:60,1')
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.customer-display.stream');
Route::post('/customer-display/{token}/action', [PublicCustomerDisplayController::class, 'action'])
    ->middleware('throttle:60,1')
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.customer-display.action');

// Token-gated kitchen display (unattended tablet; no operator chrome).
Route::get('/kitchen-display/{token}', [PublicKitchenDisplayController::class, 'show'])
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.kitchen-display.show');
Route::get('/kitchen-display/{token}/feed', [PublicKitchenDisplayController::class, 'feed'])
    ->middleware('throttle:120,1')
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.kitchen-display.feed');
Route::get('/kitchen-display/{token}/stream', [PublicKitchenDisplayController::class, 'stream'])
    ->middleware('throttle:60,1')
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.kitchen-display.stream');
Route::post('/kitchen-display/{token}/lines/{line}/bump', [PublicKitchenDisplayController::class, 'bump'])
    ->middleware('throttle:120,1')
    ->where('token', '[A-Za-z0-9]{32,64}')
    ->name('pos.kitchen-display.bump');

Route::middleware(['auth', 'platform.session'])->group(function () {
    Route::get('/wallet/balance', [WalletBalanceController::class, 'balance'])->name('wallet.balance');

    Route::post('/ai/chat', [AiController::class, 'chat'])->middleware('throttle:30,1')->name('pos.ai.chat');

    Route::get('/notifications', [NotificationController::class, 'index'])->name('notifications.index');
    Route::get('/notifications/unread', [NotificationController::class, 'unread'])->name('notifications.unread');
    Route::post('/notifications/{id}/read', [NotificationController::class, 'markAsRead'])->name('notifications.mark-read');
    Route::post('/notifications/mark-all-read', [NotificationController::class, 'markAllAsRead'])->name('notifications.mark-all-read');

    Route::get('/dashboard', [DashboardController::class, 'index'])->name('pos.dashboard');

    Route::post('/account/switch', [AccountSwitchController::class, 'switch'])->name('account.switch');
    Route::post('/settings/location/switch', [LocationController::class, 'switch'])->name('pos.location.switch');

    Route::get('/register', [RegisterController::class, 'index'])->name('pos.register');
    Route::get('/register/lookup', [RegisterController::class, 'lookup'])->name('pos.register.lookup');
    Route::get('/register/loyalty', [RegisterController::class, 'loyalty'])->name('pos.register.loyalty');
    Route::post('/register/charge', [RegisterController::class, 'charge'])->name('pos.register.charge');
    Route::post('/register/mode', [RegisterController::class, 'setMode'])->name('pos.mode.set');

    Route::get('/register/customer-display', [CustomerDisplayController::class, 'info'])->name('pos.customer-display.info');
    Route::post('/register/customer-display/push', [CustomerDisplayController::class, 'push'])->name('pos.customer-display.push');
    Route::post('/register/customer-display/rotate', [CustomerDisplayController::class, 'rotate'])->name('pos.customer-display.rotate');
    Route::get('/register/customer-display/actions', [CustomerDisplayController::class, 'actions'])->name('pos.customer-display.actions');

    Route::get('/sales', [SaleController::class, 'index'])->name('pos.sales.index');
    Route::get('/sales/{sale}/receipt', [SaleController::class, 'receipt'])->name('pos.sales.receipt');
    Route::get('/sales/{sale}', [SaleController::class, 'show'])->name('pos.sales.show');
    Route::post('/sales/{sale}/email-receipt', [SaleController::class, 'emailReceipt'])->name('pos.sales.email-receipt');
    Route::post('/sales/{sale}/cancel', [SaleController::class, 'cancel'])->name('pos.sales.cancel');
    Route::delete('/sales/{sale}', [SaleController::class, 'destroy'])->name('pos.sales.destroy');

    // Restaurant mode — floor, open tickets (tabs), and the kitchen display.
    Route::middleware('pro')->group(function () {
        Route::get('/floor', [TableController::class, 'index'])->name('pos.floor');
        Route::get('/floor/tables/{table}/qr', [TableController::class, 'qr'])->name('pos.tables.qr');
        Route::post('/tickets', [TicketController::class, 'open'])->name('pos.tickets.open');
        Route::get('/tickets/{sale}', [TicketController::class, 'show'])->name('pos.tickets.show');
        Route::post('/tickets/{sale}/lines', [TicketController::class, 'addLine'])->name('pos.tickets.lines.add');
        Route::patch('/tickets/{sale}/lines/{line}', [TicketController::class, 'updateLine'])->name('pos.tickets.lines.update');
        Route::delete('/tickets/{sale}/lines/{line}', [TicketController::class, 'removeLine'])->name('pos.tickets.lines.remove');
        Route::post('/tickets/{sale}/send', [TicketController::class, 'sendToKitchen'])->name('pos.tickets.send');
        Route::post('/tickets/{sale}/settle', [TicketController::class, 'settle'])->name('pos.tickets.settle');

        Route::get('/kitchen', [KitchenController::class, 'index'])->name('pos.kitchen');
        Route::get('/kitchen/feed', [KitchenController::class, 'feed'])->name('pos.kitchen.feed');
        Route::get('/kitchen/stream', [KitchenController::class, 'stream'])->name('pos.kitchen.stream');
        Route::post('/kitchen/lines/{line}/bump', [KitchenController::class, 'bump'])->name('pos.kitchen.bump');

        Route::get('/menu', [MenuController::class, 'index'])->name('pos.menu');
        Route::post('/menu/categories', [MenuController::class, 'storeCategory'])->name('pos.menu.categories.store');
        Route::delete('/menu/categories/{category}', [MenuController::class, 'destroyCategory'])->name('pos.menu.categories.destroy');
        Route::post('/menu/stations', [MenuController::class, 'storeStation'])->name('pos.menu.stations.store');
        Route::delete('/menu/stations/{station}', [MenuController::class, 'destroyStation'])->name('pos.menu.stations.destroy');
        Route::post('/menu/groups', [MenuController::class, 'storeGroup'])->name('pos.menu.groups.store');
        Route::delete('/menu/groups/{group}', [MenuController::class, 'destroyGroup'])->name('pos.menu.groups.destroy');
        Route::post('/menu/groups/{group}/modifiers', [MenuController::class, 'storeModifier'])->name('pos.menu.modifiers.store');
        Route::delete('/menu/modifiers/{modifier}', [MenuController::class, 'destroyModifier'])->name('pos.menu.modifiers.destroy');
    });

    Route::get('/products', [ProductController::class, 'index'])->name('pos.products.index');
    Route::get('/products/import', [ProductController::class, 'importForm'])->name('pos.products.import.form');
    Route::post('/products/import', [ProductController::class, 'import'])->name('pos.products.import');
    Route::get('/products/import/template', [ProductController::class, 'importTemplate'])->name('pos.products.import.template');
    Route::get('/products/create', [ProductController::class, 'create'])->name('pos.products.create');
    Route::post('/products', [ProductController::class, 'store'])->name('pos.products.store');
    Route::get('/products/{product}/edit', [ProductController::class, 'edit'])->name('pos.products.edit');
    Route::put('/products/{product}', [ProductController::class, 'update'])->name('pos.products.update');
    Route::delete('/products/{product}', [ProductController::class, 'destroy'])->name('pos.products.destroy');

    Route::get('/settings', [SettingsController::class, 'index'])->name('pos.settings');
    Route::put('/settings', [SettingsController::class, 'update'])->name('pos.settings.update');

    Route::get('/settings/devices', [DeviceController::class, 'index'])->name('pos.devices.index');
    Route::get('/settings/devices/create', [DeviceController::class, 'create'])->name('pos.devices.create');
    Route::post('/settings/devices', [DeviceController::class, 'store'])->name('pos.devices.store');
    Route::get('/settings/devices/{device}/edit', [DeviceController::class, 'edit'])->name('pos.devices.edit');
    Route::put('/settings/devices/{device}', [DeviceController::class, 'update'])->name('pos.devices.update');
    Route::delete('/settings/devices/{device}', [DeviceController::class, 'destroy'])->name('pos.devices.destroy');
    Route::post('/settings/devices/{device}/regenerate-token', [DeviceController::class, 'regenerateToken'])->name('pos.devices.regenerate-token');
    // Legacy /devices URLs → settings
    Route::redirect('/devices', '/settings/devices');
    Route::redirect('/devices/create', '/settings/devices/create');
    Route::get('/devices/{device}/edit', fn (string $device) => redirect("/settings/devices/{$device}/edit"));

    Route::get('/settings/branches', [LocationController::class, 'index'])->name('pos.branches.index');
    Route::get('/settings/branches/create', [LocationController::class, 'create'])->name('pos.branches.create');
    Route::post('/settings/branches', [LocationController::class, 'store'])->name('pos.branches.store');
    Route::get('/settings/branches/{location}/edit', [LocationController::class, 'edit'])->name('pos.branches.edit');
    Route::put('/settings/branches/{location}', [LocationController::class, 'update'])->name('pos.branches.update');
    Route::delete('/settings/branches/{location}', [LocationController::class, 'destroy'])->name('pos.branches.destroy');
    Route::get('/settings/team', [MemberController::class, 'index'])->name('pos.team.index');
    Route::post('/settings/team', [MemberController::class, 'store'])->name('pos.team.store');
    Route::delete('/settings/team/{member}', [MemberController::class, 'destroy'])->name('pos.team.destroy');
    Route::post('/settings/import-crm', [SettingsController::class, 'importCrm'])->middleware('pro')->name('pos.settings.import-crm');
    Route::post('/settings/import-merchant', [SettingsController::class, 'importMerchant'])->middleware('pro')->name('pos.settings.import-merchant');
    Route::post('/settings/tables', [SettingsController::class, 'storeTable'])->name('pos.settings.tables.store');
    Route::delete('/settings/tables/{table}', [SettingsController::class, 'destroyTable'])->name('pos.settings.tables.destroy');

    Route::get('/wallet', fn () => redirect()->away(ladill_account_url('/wallet')))->name('pos.wallet');

    Route::get('/pro', [ProController::class, 'index'])->name('pos.pro.index');
    Route::post('/pro/subscribe', [ProController::class, 'subscribe'])->name('pos.pro.subscribe');
    Route::post('/pro/subscribe-enterprise', [ProController::class, 'subscribeEnterprise'])->name('pos.pro.subscribe-enterprise');
    Route::post('/pro/subscribe-prepaid', [ProController::class, 'subscribePrepaid'])->name('pos.pro.subscribe-prepaid');
    Route::get('/pro/paystack/callback', [ProController::class, 'paystackCallback'])->name('pos.pro.paystack.callback');
    Route::post('/pro/cancel', [ProController::class, 'cancel'])->name('pos.pro.cancel');
});