Jenkins file

2026-07-04 22:42:58 +02:00
parent 10ee859602
commit d95bfa6c58
244 changed files with 16 additions and 15 deletions
@@ -0,0 +1,133 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Requests\Api\V1\Auth\LoginRequest;
+use App\Http\Requests\Api\V1\Auth\RefreshRequest;
+use App\Http\Requests\Api\V1\Auth\RegisterRequest;
+use App\Http\Resources\UserResource;
+use App\Models\User;
+use App\Models\Wallet;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Laravel\Sanctum\PersonalAccessToken;
+
+class AuthController extends Controller
+{
+    use RespondsWithJson;
+
+    public function register(RegisterRequest $request): JsonResponse
+    {
+        $user = User::query()->create([
+            'first_name' => $request->string('first_name')->toString(),
+            'last_name' => $request->string('last_name')->toString(),
+            'email' => $request->string('email')->toString(),
+            'phone' => $request->input('phone'),
+            'birthdate' => $request->input('birthdate'),
+            'password' => $request->string('password')->toString(),
+            'locale' => $request->input('locale', 'fr'),
+            'is_active' => true,
+        ]);
+
+        Wallet::query()->create([
+            'user_id' => $user->id,
+            'currency' => 'EUR',
+            'current_balance' => 0,
+            'status' => 'active',
+        ]);
+
+        $tokens = $this->issueTokenPair($user, $request->input('device_name', 'mobile'));
+
+        return $this->created([
+            'user' => new UserResource($user),
+            ...$tokens,
+        ], 'Inscription réussie.');
+    }
+
+    public function login(LoginRequest $request): JsonResponse
+    {
+        $user = User::query()->where('email', $request->string('email')->toString())->first();
+
+        if ($user === null || ! Hash::check($request->string('password')->toString(), $user->password)) {
+            return $this->error('Identifiants invalides.', 401);
+        }
+
+        if (! $user->is_active) {
+            return $this->error('Compte utilisateur désactivé.', 403);
+        }
+
+        $tokens = $this->issueTokenPair($user, $request->input('device_name', 'mobile'));
+
+        return $this->success([
+            'user' => new UserResource($user),
+            ...$tokens,
+        ], 'Connexion réussie.');
+    }
+
+    public function refresh(RefreshRequest $request): JsonResponse
+    {
+        $token = PersonalAccessToken::findToken($request->string('refresh_token')->toString());
+
+        if ($token === null || ! $token->can('refresh') || ! $token->can('user')) {
+            return $this->error('Refresh token invalide.', 401);
+        }
+
+        $user = $token->tokenable;
+
+        if (! $user instanceof User || ! $user->is_active) {
+            return $this->error('Utilisateur non autorisé.', 403);
+        }
+
+        $token->delete();
+        $user->tokens()->where('name', 'like', '%-access')->delete();
+
+        $tokens = $this->issueTokenPair($user, 'mobile');
+
+        return $this->success([
+            'user' => new UserResource($user),
+            ...$tokens,
+        ], 'Token renouvelé.');
+    }
+
+    public function logout(Request $request): JsonResponse
+    {
+        $request->user()?->currentAccessToken()?->delete();
+
+        return $this->success(message: 'Déconnexion réussie.');
+    }
+
+    public function me(Request $request): JsonResponse
+    {
+        return $this->success([
+            'user' => new UserResource($request->user()),
+        ]);
+    }
+
+    private function issueTokenPair(User $user, string $deviceName): array
+    {
+        $accessMinutes = (int) config('laverie.auth.access_token_ttl_minutes', 60);
+        $refreshDays = (int) config('laverie.auth.refresh_token_ttl_days', 30);
+
+        $accessToken = $user->createToken(
+            "{$deviceName}-access",
+            ['user', 'access'],
+            now()->addMinutes($accessMinutes),
+        );
+
+        $refreshToken = $user->createToken(
+            "{$deviceName}-refresh",
+            ['user', 'refresh'],
+            now()->addDays($refreshDays),
+        );
+
+        return [
+            'access_token' => $accessToken->plainTextToken,
+            'refresh_token' => $refreshToken->plainTextToken,
+            'token_type' => 'Bearer',
+            'expires_in' => $accessMinutes * 60,
+        ];
+    }
+}
@@ -0,0 +1,131 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Exceptions\BookingConflictException;
+use App\Exceptions\WalletInsufficientFundsException;
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Requests\Api\V1\Booking\MoveBookingRequest;
+use App\Http\Requests\Api\V1\Booking\StoreBookingRequest;
+use App\Http\Resources\BookingResource;
+use App\Models\Booking;
+use App\Models\Machine;
+use App\Services\BookingService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+
+class BookingController extends Controller
+{
+    use RespondsWithJson;
+
+    public function __construct(
+        private readonly BookingService $bookingService,
+    ) {}
+
+    public function store(StoreBookingRequest $request): JsonResponse
+    {
+        $machine = Machine::query()
+            ->where('uuid', $request->string('machine_uuid')->toString())
+            ->firstOrFail();
+
+        try {
+            $booking = $this->bookingService->createBooking(
+                $request->user(),
+                $machine,
+                Carbon::parse($request->input('slot_start')),
+                Carbon::parse($request->input('slot_end')),
+                $request->input('idempotency_key'),
+            );
+        } catch (BookingConflictException $e) {
+            return $this->error($e->getMessage(), 409);
+        } catch (WalletInsufficientFundsException $e) {
+            return $this->error($e->getMessage(), 402);
+        } catch (\RuntimeException|\InvalidArgumentException $e) {
+            return $this->error($e->getMessage(), 422);
+        }
+
+        return $this->created([
+            'booking' => new BookingResource($booking->load('machine.establishment')),
+        ], 'Réservation créée.');
+    }
+
+    public function index(Request $request): JsonResponse
+    {
+        $bookings = Booking::query()
+            ->where('user_id', $request->user()->id)
+            ->with(['machine.establishment'])
+            ->when($request->filled('status'), fn ($q) => $q->where('status', $request->string('status')->toString()))
+            ->orderByDesc('slot_start')
+            ->paginate($request->integer('per_page', 20));
+
+        return $this->success([
+            'bookings' => BookingResource::collection($bookings),
+            'meta' => [
+                'current_page' => $bookings->currentPage(),
+                'last_page' => $bookings->lastPage(),
+                'per_page' => $bookings->perPage(),
+                'total' => $bookings->total(),
+            ],
+        ]);
+    }
+
+    public function show(Request $request, string $uuid): JsonResponse
+    {
+        $booking = Booking::query()
+            ->where('uuid', $uuid)
+            ->where('user_id', $request->user()->id)
+            ->with(['machine.establishment'])
+            ->firstOrFail();
+
+        return $this->success([
+            'booking' => new BookingResource($booking),
+        ]);
+    }
+
+    public function cancel(Request $request, string $uuid): JsonResponse
+    {
+        $booking = Booking::query()
+            ->where('uuid', $uuid)
+            ->where('user_id', $request->user()->id)
+            ->firstOrFail();
+
+        try {
+            $booking = $this->bookingService->cancelBooking($booking, $request->user());
+        } catch (\RuntimeException $e) {
+            return $this->error($e->getMessage(), 422);
+        }
+
+        return $this->success([
+            'booking' => new BookingResource($booking->load('machine.establishment')),
+        ], 'Réservation annulée.');
+    }
+
+    public function move(MoveBookingRequest $request, string $uuid): JsonResponse
+    {
+        $booking = Booking::query()
+            ->where('uuid', $uuid)
+            ->where('user_id', $request->user()->id)
+            ->firstOrFail();
+
+        try {
+            $booking = $this->bookingService->moveBooking(
+                $booking,
+                $request->user(),
+                Carbon::parse($request->input('slot_start')),
+                Carbon::parse($request->input('slot_end')),
+            );
+        } catch (BookingConflictException $e) {
+            return $this->error($e->getMessage(), 409);
+        } catch (WalletInsufficientFundsException $e) {
+            return $this->error($e->getMessage(), 402);
+        } catch (\RuntimeException|\InvalidArgumentException $e) {
+            return $this->error($e->getMessage(), 422);
+        }
+
+        return $this->success([
+            'booking' => new BookingResource($booking->load('machine.establishment')),
+        ], 'Réservation déplacée.');
+    }
+}
@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Resources\EstablishmentResource;
+use App\Models\Establishment;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class EstablishmentController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        $establishments = Establishment::query()
+            ->where('is_active', true)
+            ->when($request->filled('city'), fn ($q) => $q->where('city', $request->string('city')->toString()))
+            ->orderBy('name')
+            ->get();
+
+        return $this->success([
+            'establishments' => EstablishmentResource::collection($establishments),
+        ]);
+    }
+
+    public function show(string $uuid): JsonResponse
+    {
+        $establishment = Establishment::query()
+            ->where('uuid', $uuid)
+            ->where('is_active', true)
+            ->with(['machines' => fn ($q) => $q->orderBy('name')])
+            ->firstOrFail();
+
+        return $this->success([
+            'establishment' => new EstablishmentResource($establishment),
+        ]);
+    }
+}
@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Controllers\Controller;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\DB;
+use Throwable;
+
+class HealthController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(): JsonResponse
+    {
+        return $this->success([
+            'status' => 'ok',
+            'service' => 'laverie-api',
+            'timezone' => config('app.timezone'),
+            'timestamp' => now()->toIso8601String(),
+        ]);
+    }
+
+    public function database(): JsonResponse
+    {
+        try {
+            DB::select('SELECT 1');
+
+            return $this->success([
+                'status' => 'ok',
+                'database' => config('database.default'),
+                'timestamp' => now()->toIso8601String(),
+            ]);
+        } catch (Throwable $e) {
+            return $this->error('Database connection failed', 503, [
+                'database' => ['Connection unavailable'],
+            ]);
+        }
+    }
+}
@@ -0,0 +1,78 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Integration;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Requests\Api\V1\Integration\AckCommandRequest;
+use App\Http\Requests\Api\V1\Integration\HeartbeatRequest;
+use App\Http\Requests\Api\V1\Integration\MachineEventRequest;
+use App\Models\MachineCommand;
+use App\Models\MachineIntegration;
+use App\Services\MachineIntegrationService;
+use Illuminate\Http\JsonResponse;
+
+class MachineEventController extends Controller
+{
+    use RespondsWithJson;
+
+    public function __construct(
+        private readonly MachineIntegrationService $machineIntegrationService,
+    ) {}
+
+    public function store(MachineEventRequest $request): JsonResponse
+    {
+        $payload = $request->validated();
+
+        $this->machineIntegrationService->handleInboundEvent(
+            $payload['provider'],
+            $payload,
+        );
+
+        return $this->created(['received' => true], 'Événement enregistré.');
+    }
+
+    public function heartbeat(HeartbeatRequest $request): JsonResponse
+    {
+        $payload = $request->validated();
+        $payload['event_type'] = 'heartbeat';
+        $payload['occurred_at'] = $payload['occurred_at'] ?? now()->toIso8601String();
+
+        $integration = MachineIntegration::query()
+            ->where('provider', $payload['provider'])
+            ->where('external_machine_id', $payload['machine_external_id'])
+            ->where('is_active', true)
+            ->with('machine')
+            ->first();
+
+        if ($integration?->machine !== null) {
+            $integration->machine->update(['last_heartbeat_at' => now()]);
+        }
+
+        $this->machineIntegrationService->handleInboundEvent(
+            $payload['provider'],
+            $payload,
+        );
+
+        return $this->success(['received' => true], 'Heartbeat enregistré.');
+    }
+
+    public function ackCommand(AckCommandRequest $request, string $uuid): JsonResponse
+    {
+        $command = MachineCommand::query()->where('uuid', $uuid)->firstOrFail();
+
+        $command->update([
+            'status' => $request->string('status')->toString(),
+            'external_reference' => $request->input('external_reference'),
+            'responded_at' => now(),
+            'payload' => array_merge($command->payload ?? [], [
+                'ack' => $request->input('data', []),
+            ]),
+        ]);
+
+        return $this->success([
+            'command_uuid' => $command->uuid,
+            'status' => $command->status,
+        ], 'Accusé de réception enregistré.');
+    }
+}
@@ -0,0 +1,134 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Resources\MachineResource;
+use App\Models\Booking;
+use App\Models\Machine;
+use App\Services\PricingService;
+use App\Support\WashCycleProgress;
+use Carbon\Carbon;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class MachineController extends Controller
+{
+    use RespondsWithJson;
+
+    public function __construct(
+        private readonly PricingService $pricingService,
+    ) {}
+
+    public function show(string $uuid): JsonResponse
+    {
+        $machine = Machine::query()
+            ->where('uuid', $uuid)
+            ->with('establishment')
+            ->firstOrFail();
+
+        return $this->success([
+            'machine' => new MachineResource($machine),
+            'pricing' => [
+                'price' => $this->pricingService->getActivePrice($machine),
+                'currency' => 'EUR',
+            ],
+            'estimated_duration_minutes' => WashCycleProgress::estimateDurationMinutes($machine->type),
+        ]);
+    }
+
+    public function lookup(Request $request): JsonResponse
+    {
+        $request->validate([
+            'qr_code' => ['required_without:machine_uuid', 'nullable', 'string', 'max:255'],
+            'machine_uuid' => ['required_without:qr_code', 'nullable', 'uuid'],
+        ]);
+
+        $machine = $request->filled('machine_uuid')
+            ? Machine::query()->where('uuid', $request->string('machine_uuid')->toString())->firstOrFail()
+            : Machine::query()->where('qr_code', $request->string('qr_code')->toString())->firstOrFail();
+
+        $machine->load('establishment');
+
+        return $this->success([
+            'machine' => new MachineResource($machine),
+            'pricing' => [
+                'price' => $this->pricingService->getActivePrice($machine),
+                'currency' => 'EUR',
+            ],
+            'estimated_duration_minutes' => WashCycleProgress::estimateDurationMinutes($machine->type),
+        ]);
+    }
+
+    public function availability(Request $request, string $uuid): JsonResponse
+    {
+        $machine = Machine::query()
+            ->where('uuid', $uuid)
+            ->with('establishment')
+            ->firstOrFail();
+
+        $date = $request->filled('date')
+            ? Carbon::parse($request->string('date')->toString())->startOfDay()
+            : now()->startOfDay();
+
+        $slotDuration = $request->integer('slot_minutes', 60);
+        $dayStart = $date->copy()->setTime(7, 0);
+        $dayEnd = $date->copy()->setTime(22, 0);
+
+        $bookings = Booking::query()
+            ->where('machine_id', $machine->id)
+            ->whereIn('status', ['pending', 'confirmed', 'active'])
+            ->where('slot_start', '<', $dayEnd)
+            ->where('slot_end', '>', $dayStart)
+            ->get(['slot_start', 'slot_end']);
+
+        $slots = [];
+        $cursor = $dayStart->copy();
+
+        while ($cursor->copy()->addMinutes($slotDuration)->lte($dayEnd)) {
+            $slotEnd = $cursor->copy()->addMinutes($slotDuration);
+            $isAvailable = $cursor->isFuture() && ! in_array($machine->status, ['offline', 'maintenance', 'out_of_order'], true);
+
+            if ($isAvailable) {
+                foreach ($bookings as $booking) {
+                    if ($booking->slot_start < $slotEnd && $booking->slot_end > $cursor) {
+                        $isAvailable = false;
+                        break;
+                    }
+                }
+            }
+
+            if ($isAvailable) {
+                $slots[] = [
+                    'start' => $cursor->toIso8601String(),
+                    'end' => $slotEnd->toIso8601String(),
+                ];
+            }
+
+            $cursor->addMinutes($slotDuration);
+        }
+
+        return $this->success([
+            'machine_uuid' => $machine->uuid,
+            'date' => $date->toDateString(),
+            'slots' => $slots,
+        ]);
+    }
+
+    public function pricing(string $uuid): JsonResponse
+    {
+        $machine = Machine::query()
+            ->where('uuid', $uuid)
+            ->with('establishment')
+            ->firstOrFail();
+
+        $price = $this->pricingService->getActivePrice($machine);
+
+        return $this->success([
+            'machine_uuid' => $machine->uuid,
+            'price' => $price,
+            'currency' => 'EUR',
+        ]);
+    }
+}
@@ -0,0 +1,74 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Requests\Api\V1\Supervisor\LoginRequest;
+use App\Http\Resources\SupervisorResource;
+use App\Models\Supervisor;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+
+class AuthController extends Controller
+{
+    use RespondsWithJson;
+
+    public function login(LoginRequest $request): JsonResponse
+    {
+        $supervisor = Supervisor::query()
+            ->where('email', $request->string('email')->toString())
+            ->first();
+
+        if ($supervisor === null || ! Hash::check($request->string('password')->toString(), $supervisor->password)) {
+            return $this->error('Identifiants invalides.', 401);
+        }
+
+        if (! $supervisor->is_active) {
+            return $this->error('Compte superviseur désactivé.', 403);
+        }
+
+        $supervisor->update(['last_login_at' => now()]);
+
+        $deviceName = $request->input('device_name', 'backoffice');
+        $accessMinutes = (int) config('laverie.auth.access_token_ttl_minutes', 60);
+        $refreshDays = (int) config('laverie.auth.refresh_token_ttl_days', 30);
+
+        $accessToken = $supervisor->createToken(
+            "{$deviceName}-access",
+            ['supervisor', 'access'],
+            now()->addMinutes($accessMinutes),
+        );
+
+        $refreshToken = $supervisor->createToken(
+            "{$deviceName}-refresh",
+            ['supervisor', 'refresh'],
+            now()->addDays($refreshDays),
+        );
+
+        Auth::guard('supervisor')->login($supervisor);
+
+        return $this->success([
+            'supervisor' => new SupervisorResource($supervisor),
+            'access_token' => $accessToken->plainTextToken,
+            'refresh_token' => $refreshToken->plainTextToken,
+            'token_type' => 'Bearer',
+            'expires_in' => $accessMinutes * 60,
+        ], 'Connexion superviseur réussie.');
+    }
+
+    public function logout(Request $request): JsonResponse
+    {
+        $user = $request->user();
+
+        if ($user instanceof Supervisor) {
+            $user->currentAccessToken()?->delete();
+        }
+
+        Auth::guard('supervisor')->logout();
+
+        return $this->success(message: 'Déconnexion superviseur réussie.');
+    }
+}
@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Middleware\EnsureSupervisorScope;
+use App\Http\Resources\BookingResource;
+use App\Models\Supervisor;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class BookingController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $bookings = EnsureSupervisorScope::bookingsQuery($supervisor)
+            ->when($request->filled('status'), fn ($q) => $q->where('status', $request->string('status')->toString()))
+            ->when($request->filled('date'), fn ($q) => $q->whereDate('slot_start', $request->string('date')->toString()))
+            ->orderByDesc('slot_start')
+            ->paginate($request->integer('per_page', 50));
+
+        return $this->success([
+            'bookings' => BookingResource::collection($bookings),
+            'meta' => [
+                'current_page' => $bookings->currentPage(),
+                'last_page' => $bookings->lastPage(),
+                'per_page' => $bookings->perPage(),
+                'total' => $bookings->total(),
+            ],
+        ]);
+    }
+}
@@ -0,0 +1,60 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Middleware\EnsureSupervisorScope;
+use App\Models\Supervisor;
+use Carbon\Carbon;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class DashboardController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $today = Carbon::today();
+        $statsQuery = EnsureSupervisorScope::dailyStatsQuery($supervisor)
+            ->where('stat_date', $today);
+
+        $todayStats = $statsQuery->get();
+
+        $machinesQuery = EnsureSupervisorScope::machinesQuery($supervisor);
+        $offlineThreshold = now()->subMinutes((int) config('laverie.machine.offline_threshold_minutes', 10));
+
+        return $this->success([
+            'summary' => [
+                'machines_total' => (clone $machinesQuery)->count(),
+                'machines_available' => (clone $machinesQuery)->where('status', 'available')->count(),
+                'machines_running' => (clone $machinesQuery)->where('status', 'running')->count(),
+                'machines_offline' => (clone $machinesQuery)->where(function ($q) use ($offlineThreshold) {
+                    $q->where('status', 'offline')
+                        ->orWhere(fn ($q) => $q->where('last_heartbeat_at', '<', $offlineThreshold));
+                })->count(),
+                'bookings_today' => EnsureSupervisorScope::bookingsQuery($supervisor)
+                    ->whereDate('slot_start', $today)
+                    ->count(),
+                'washes_today' => EnsureSupervisorScope::washesQuery($supervisor)
+                    ->whereDate('started_at', $today)
+                    ->count(),
+                'revenue_today' => (float) $todayStats->sum('total_revenue'),
+                'top_up_today' => (float) $todayStats->sum('top_up_amount'),
+            ],
+            'establishments' => $todayStats->map(fn ($stat) => [
+                'establishment_id' => $stat->establishment_id,
+                'establishment_name' => $stat->establishment?->name,
+                'total_washes' => $stat->total_washes,
+                'total_revenue' => (float) $stat->total_revenue,
+                'bookings_count' => $stat->bookings_count,
+                'no_show_count' => $stat->no_show_count,
+                'occupancy_rate' => (float) $stat->occupancy_rate,
+            ]),
+        ]);
+    }
+}
@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Middleware\EnsureSupervisorScope;
+use App\Http\Resources\MachineResource;
+use App\Models\Supervisor;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class MachineController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $machines = EnsureSupervisorScope::machinesQuery($supervisor)
+            ->when($request->filled('status'), fn ($q) => $q->where('status', $request->string('status')->toString()))
+            ->when($request->filled('establishment_id'), fn ($q) => $q->where('establishment_id', $request->integer('establishment_id')))
+            ->orderBy('name')
+            ->paginate($request->integer('per_page', 50));
+
+        return $this->success([
+            'machines' => MachineResource::collection($machines),
+            'meta' => [
+                'current_page' => $machines->currentPage(),
+                'last_page' => $machines->lastPage(),
+                'per_page' => $machines->perPage(),
+                'total' => $machines->total(),
+            ],
+        ]);
+    }
+}
@@ -0,0 +1,91 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Middleware\EnsureSupervisorScope;
+use App\Http\Requests\Api\V1\Supervisor\StorePricingRequest;
+use App\Http\Requests\Api\V1\Supervisor\UpdatePricingRequest;
+use App\Http\Resources\PricingRuleResource;
+use App\Models\Establishment;
+use App\Models\PricingRule;
+use App\Models\Supervisor;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class PricingController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $rules = EnsureSupervisorScope::pricingRulesQuery($supervisor)
+            ->when($request->filled('establishment_id'), fn ($q) => $q->where('establishment_id', $request->integer('establishment_id')))
+            ->orderBy('priority')
+            ->paginate($request->integer('per_page', 50));
+
+        return $this->success([
+            'pricing_rules' => PricingRuleResource::collection($rules),
+            'meta' => [
+                'current_page' => $rules->currentPage(),
+                'last_page' => $rules->lastPage(),
+                'per_page' => $rules->perPage(),
+                'total' => $rules->total(),
+            ],
+        ]);
+    }
+
+    public function store(StorePricingRequest $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $establishment = Establishment::query()->findOrFail($request->integer('establishment_id'));
+
+        if ($establishment->organization_id !== $supervisor->organization_id) {
+            return $this->error('Établissement hors périmètre.', 403);
+        }
+
+        if ($supervisor->establishment_id !== null && $supervisor->establishment_id !== $establishment->id) {
+            return $this->error('Établissement hors périmètre.', 403);
+        }
+
+        $rule = PricingRule::query()->create([
+            'establishment_id' => $establishment->id,
+            'machine_id' => $request->input('machine_id'),
+            'machine_type' => $request->input('machine_type'),
+            'day_type' => $request->string('day_type')->toString(),
+            'slot_start' => $request->string('slot_start')->toString(),
+            'slot_end' => $request->string('slot_end')->toString(),
+            'price' => $request->input('price'),
+            'label' => $request->input('label'),
+            'requires_app' => $request->boolean('requires_app'),
+            'priority' => $request->integer('priority', 100),
+            'is_active' => $request->boolean('is_active', true),
+        ]);
+
+        return $this->created([
+            'pricing_rule' => new PricingRuleResource($rule->load(['establishment', 'machine'])),
+        ], 'Règle tarifaire créée.');
+    }
+
+    public function update(UpdatePricingRequest $request, int $id): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $rule = EnsureSupervisorScope::pricingRulesQuery($supervisor)
+            ->whereKey($id)
+            ->firstOrFail();
+
+        $rule->update($request->validated());
+
+        return $this->success([
+            'pricing_rule' => new PricingRuleResource($rule->fresh(['establishment', 'machine'])),
+        ], 'Règle tarifaire mise à jour.');
+    }
+}
@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Middleware\EnsureSupervisorScope;
+use App\Http\Resources\PromotionResource;
+use App\Models\Supervisor;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class PromotionController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $promotions = EnsureSupervisorScope::promotionsQuery($supervisor)
+            ->when($request->filled('establishment_id'), fn ($q) => $q->where('establishment_id', $request->integer('establishment_id')))
+            ->when($request->boolean('active_only'), fn ($q) => $q->where('is_active', true))
+            ->orderByDesc('starts_at')
+            ->paginate($request->integer('per_page', 50));
+
+        return $this->success([
+            'promotions' => PromotionResource::collection($promotions),
+            'meta' => [
+                'current_page' => $promotions->currentPage(),
+                'last_page' => $promotions->lastPage(),
+                'per_page' => $promotions->perPage(),
+                'total' => $promotions->total(),
+            ],
+        ]);
+    }
+}
@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1\Supervisor;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Middleware\EnsureSupervisorScope;
+use App\Http\Resources\WashResource;
+use App\Models\Supervisor;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class WashController extends Controller
+{
+    use RespondsWithJson;
+
+    public function index(Request $request): JsonResponse
+    {
+        /** @var Supervisor $supervisor */
+        $supervisor = $request->attributes->get('supervisor') ?? $request->user();
+
+        $washes = EnsureSupervisorScope::washesQuery($supervisor)
+            ->when($request->filled('status'), fn ($q) => $q->where('status', $request->string('status')->toString()))
+            ->when($request->filled('date'), fn ($q) => $q->whereDate('started_at', $request->string('date')->toString()))
+            ->orderByDesc('started_at')
+            ->paginate($request->integer('per_page', 50));
+
+        return $this->success([
+            'washes' => WashResource::collection($washes),
+            'meta' => [
+                'current_page' => $washes->currentPage(),
+                'last_page' => $washes->lastPage(),
+                'per_page' => $washes->perPage(),
+                'total' => $washes->total(),
+            ],
+        ]);
+    }
+}
@@ -0,0 +1,112 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Requests\Api\V1\Wallet\ConfirmTopUpRequest;
+use App\Http\Requests\Api\V1\Wallet\InitiateTopUpRequest;
+use App\Http\Resources\PaymentTransactionResource;
+use App\Http\Resources\WalletResource;
+use App\Http\Resources\WalletTransactionResource;
+use App\Models\Wallet;
+use App\Models\WalletTransaction;
+use App\Services\PaymentService;
+use App\Services\WalletService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class WalletController extends Controller
+{
+    use RespondsWithJson;
+
+    public function __construct(
+        private readonly WalletService $walletService,
+    ) {}
+
+    public function index(Request $request): JsonResponse
+    {
+        $user = $request->user();
+        $wallet = Wallet::query()->firstOrCreate(
+            ['user_id' => $user->id],
+            ['currency' => 'EUR', 'current_balance' => 0, 'status' => 'active'],
+        );
+
+        return $this->success([
+            'balance' => $this->walletService->getBalance($user),
+            'wallet' => new WalletResource($wallet->fresh()),
+        ]);
+    }
+
+    public function transactions(Request $request): JsonResponse
+    {
+        $wallet = Wallet::query()->where('user_id', $request->user()->id)->first();
+
+        if ($wallet === null) {
+            return $this->success(['transactions' => []]);
+        }
+
+        $transactions = WalletTransaction::query()
+            ->where('wallet_id', $wallet->id)
+            ->orderByDesc('created_at')
+            ->paginate($request->integer('per_page', 20));
+
+        return $this->success([
+            'transactions' => WalletTransactionResource::collection($transactions),
+            'meta' => [
+                'current_page' => $transactions->currentPage(),
+                'last_page' => $transactions->lastPage(),
+                'per_page' => $transactions->perPage(),
+                'total' => $transactions->total(),
+            ],
+        ]);
+    }
+
+    public function initiateTopUp(InitiateTopUpRequest $request, PaymentService $paymentService): JsonResponse
+    {
+        $payment = $paymentService->initiateTopUp(
+            $request->user(),
+            (float) $request->input('amount'),
+            $request->string('idempotency_key')->toString(),
+            $request->input('return_url'),
+        );
+
+        return $this->created([
+            'payment' => new PaymentTransactionResource($payment),
+        ], 'Rechargement initié.');
+    }
+
+    public function confirmTopUp(ConfirmTopUpRequest $request, PaymentService $paymentService): JsonResponse
+    {
+        $payment = $paymentService->confirmTopUp(
+            $request->string('payment_uuid')->toString(),
+        );
+
+        if ($payment->user_id !== $request->user()->id) {
+            return $this->error('Paiement non autorisé.', 403);
+        }
+
+        return $this->success([
+            'payment' => new PaymentTransactionResource($payment),
+            'balance' => $this->walletService->getBalance($request->user()),
+        ], 'Rechargement confirmé.');
+    }
+
+    public function webhook(Request $request, string $provider, PaymentService $paymentService): JsonResponse
+    {
+        if ($provider === 'stripe') {
+            try {
+                $paymentService->handleStripeWebhook(
+                    $request->getContent(),
+                    $request->header('Stripe-Signature', ''),
+                );
+            } catch (\InvalidArgumentException $e) {
+                return $this->error($e->getMessage(), 400);
+            }
+        } else {
+            $paymentService->handleWebhook($provider, $request->all());
+        }
+
+        return $this->success(message: 'Webhook traité.');
+    }
+}
@@ -0,0 +1,93 @@
+<?php
+
+namespace App\Http\Controllers\Api\V1;
+
+use App\Exceptions\MachineNotAvailableException;
+use App\Exceptions\WalletInsufficientFundsException;
+use App\Http\Controllers\Controller;
+use App\Http\Controllers\Concerns\RespondsWithJson;
+use App\Http\Requests\Api\V1\Wash\StartWashRequest;
+use App\Http\Resources\WashResource;
+use App\Models\Booking;
+use App\Models\Machine;
+use App\Models\Wash;
+use App\Services\WashService;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class WashController extends Controller
+{
+    use RespondsWithJson;
+
+    public function __construct(
+        private readonly WashService $washService,
+    ) {}
+
+    public function start(StartWashRequest $request): JsonResponse
+    {
+        $machine = $request->filled('machine_uuid')
+            ? Machine::query()->where('uuid', $request->string('machine_uuid')->toString())->firstOrFail()
+            : Machine::query()->where('qr_code', $request->string('qr_code')->toString())->firstOrFail();
+
+        $bookingId = null;
+        if ($request->filled('booking_uuid')) {
+            $bookingId = Booking::query()
+                ->where('uuid', $request->string('booking_uuid')->toString())
+                ->where('user_id', $request->user()->id)
+                ->value('id');
+        }
+
+        try {
+            $wash = $this->washService->startWash(
+                $request->user(),
+                $machine,
+                $request->string('trigger_method')->toString(),
+                $bookingId,
+                $request->input('program'),
+            );
+        } catch (MachineNotAvailableException $e) {
+            return $this->error($e->getMessage(), 409);
+        } catch (WalletInsufficientFundsException $e) {
+            return $this->error($e->getMessage(), 402);
+        } catch (\RuntimeException $e) {
+            return $this->error($e->getMessage(), 422);
+        }
+
+        return $this->created([
+            'wash' => new WashResource($wash),
+        ], 'Lavage démarré.');
+    }
+
+    public function index(Request $request): JsonResponse
+    {
+        $washes = Wash::query()
+            ->where('user_id', $request->user()->id)
+            ->with(['machine.establishment', 'booking'])
+            ->when($request->filled('status'), fn ($q) => $q->where('status', $request->string('status')->toString()))
+            ->orderByDesc('created_at')
+            ->paginate($request->integer('per_page', 20));
+
+        return $this->success([
+            'washes' => WashResource::collection($washes),
+            'meta' => [
+                'current_page' => $washes->currentPage(),
+                'last_page' => $washes->lastPage(),
+                'per_page' => $washes->perPage(),
+                'total' => $washes->total(),
+            ],
+        ]);
+    }
+
+    public function show(Request $request, string $uuid): JsonResponse
+    {
+        $wash = Wash::query()
+            ->where('uuid', $uuid)
+            ->where('user_id', $request->user()->id)
+            ->with(['machine.establishment', 'booking'])
+            ->firstOrFail();
+
+        return $this->success([
+            'wash' => new WashResource($wash),
+        ]);
+    }
+}