Subversion Repositories SmartDukaan

package com.spice.profitmandi.web.controller;

import com.google.gson.Gson;

import com.google.gson.reflect.TypeToken;

import com.spice.profitmandi.common.exception.ProfitMandiBusinessException;

import com.spice.profitmandi.common.model.CustomRetailer;

import com.spice.profitmandi.common.model.ProfitMandiConstants;

import com.spice.profitmandi.common.web.util.ResponseSender;

import com.spice.profitmandi.dao.entity.auth.AuthUser;

import com.spice.profitmandi.dao.entity.fofo.FofoStore;

import com.spice.profitmandi.dao.entity.logistics.PublicHolidays;

import com.spice.profitmandi.dao.entity.user.*;

import com.spice.profitmandi.dao.enumuration.cs.EscalationType;

import com.spice.profitmandi.dao.repository.auth.AuthRepository;

import com.spice.profitmandi.dao.repository.cs.CsService;

import com.spice.profitmandi.dao.repository.dtr.*;

import com.spice.profitmandi.dao.repository.logistics.PublicHolidaysRepository;

import com.spice.profitmandi.service.user.RetailerService;

import com.spice.profitmandi.web.model.LoginDetails;

import com.spice.profitmandi.web.util.CookiesProcessor;

import org.apache.logging.log4j.LogManager;

import org.apache.logging.log4j.Logger;

import org.springframework.beans.factory.annotation.Autowired;

import org.springframework.http.ResponseEntity;

import org.springframework.stereotype.Controller;

import org.springframework.transaction.annotation.Transactional;

import org.springframework.ui.Model;

import org.springframework.web.bind.annotation.GetMapping;

import org.springframework.web.bind.annotation.PostMapping;

import org.springframework.web.bind.annotation.RequestParam;

import javax.servlet.http.HttpServletRequest;

import java.lang.reflect.Type;

import java.time.DayOfWeek;

import java.time.LocalDate;

import java.time.LocalDateTime;

import java.time.YearMonth;

import java.time.format.DateTimeFormatter;

import java.util.*;

import java.util.stream.Collectors;

@Controller

@Transactional(rollbackFor = Throwable.class)

public class BeatPlanController {

	private static final Logger LOGGER = LogManager.getLogger(BeatPlanController.class);

	private static final String[] BEAT_COLORS = {

			"#3498DB", "#E74C3C", "#2ECC71", "#9B59B6", "#F39C12",

			"#1ABC9C", "#E67E22", "#34495E", "#16A085", "#C0392B"

	};

	@Autowired

	private CsService csService;

	@Autowired

	private AuthRepository authRepository;

	// Emails that bypass hierarchy and role gates — single source of truth.

	private static final Set<String> SUPER_ADMIN_EMAILS = new HashSet<>(Arrays.asList(

			"tarun.verma@smartdukaan.com"

	));

	@Autowired

	private com.spice.profitmandi.service.AuthService authService;

	@Autowired

	private com.spice.profitmandi.dao.repository.cs.PositionRepository positionRepository;

	@Autowired

	private RetailerService retailerService;

	@Autowired

	private BeatRepository beatRepository;

	@Autowired

	private BeatRouteRepository beatRouteRepository;

	@Autowired

	private BeatScheduleRepository beatScheduleRepository;

	@Autowired

	private LeadRouteRepository leadRouteRepository;

	@Autowired

	private com.spice.profitmandi.dao.service.BeatPlanQueryService beatPlanQueryService;

	@Autowired

	private AuthUserLocationRepository authUserLocationRepository;

	@Autowired

	private LeadRepository leadRepository;

	@Autowired

	private PublicHolidaysRepository publicHolidaysRepository;

	@Autowired

	private com.spice.profitmandi.service.GeocodingService geocodingService;

	@Autowired

	private CookiesProcessor cookiesProcessor;

	@Autowired

	private ResponseSender responseSender;

	@Autowired

	private FofoStoreRepository fofoStoreRepository;

	@Autowired

	private com.spice.profitmandi.dao.repository.logistics.CompanyOfficeRepository companyOfficeRepository;

	@GetMapping(value = "/beatPlan")

	public String beatPlan(HttpServletRequest request, Model model) throws ProfitMandiBusinessException {

		model.addAttribute("escalationTypes", visibleLevelsFor(request));

		return "beat-plan";

	}

	@Autowired

	private com.spice.profitmandi.dao.repository.dtr.LeadLiveLocationRepository leadLiveLocationRepositoryAuto;

	@Autowired

	private com.spice.profitmandi.dao.repository.dtr.LeadActivityRepository leadActivityRepositoryAuto;

	@Autowired

	private com.spice.profitmandi.dao.repository.dtr.UserRepository userRepositoryAuto;

	@Autowired

	private com.spice.profitmandi.common.web.client.RestClient restClientAuto;

	@Autowired

	private com.spice.profitmandi.dao.repository.auth.LocationTrackingRepository locationTrackingRepositoryAuto;

	@Autowired

	private com.spice.profitmandi.dao.repository.dtr.BeatDeferredVisitRepository beatDeferredVisitRepository;

	private static Double parseDoubleOrNull(String s) {

		if (s == null || s.trim().isEmpty()) return null;

		try {

			return Double.parseDouble(s.trim());

		} catch (NumberFormatException e) {

			return null;

		}

	}

	private static double haversineKm(double lat1, double lng1, double lat2, double lng2) {

		double R = 6371;

		double dLat = Math.toRadians(lat2 - lat1);

		double dLng = Math.toRadians(lng2 - lng1);

		double a = Math.sin(dLat / 2) * Math.sin(dLat / 2)

				+ Math.cos(Math.toRadians(lat1)) * Math.cos(Math.toRadians(lat2))

				* Math.sin(dLng / 2) * Math.sin(dLng / 2);

		double c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));

		return R * c;

	}

	// Reorder a day's bulk-upload stops in place into a greedy nearest-neighbor

	// route from the given start point (the beat's start location). Codes with no

	// known coordinates (offices, or partners missing lat/lng) are parked at the

	// end preserving their relative order rather than dropped. Sequence is taken

	// from the resulting list position by the caller.

	private static void sortPartnersByNearestNeighbor(List<BulkPartner> partners, Double startLat, Double startLng, Map<String, double[]> codeToLatLng) {

		if (partners == null || partners.size() < 2) return;

		List<BulkPartner> routable = new ArrayList<>();

		List<BulkPartner> parked = new ArrayList<>();

		for (BulkPartner p : partners) {

			if (codeToLatLng.containsKey(p.code)) routable.add(p);

			else parked.add(p);

		}

		List<BulkPartner> ordered = new ArrayList<>();

		double curLat, curLng;

		if (startLat != null && startLng != null) {

			curLat = startLat;

			curLng = startLng;

		} else if (!routable.isEmpty()) {

			BulkPartner first = routable.remove(0);

			ordered.add(first);

			double[] c = codeToLatLng.get(first.code);

			curLat = c[0];

			curLng = c[1];

		} else {

			return;

		}

		while (!routable.isEmpty()) {

			int bestIdx = 0;

			double bestD = Double.MAX_VALUE;

			for (int i = 0; i < routable.size(); i++) {

				double[] c = codeToLatLng.get(routable.get(i).code);

				double d = haversineKm(curLat, curLng, c[0], c[1]);

				if (d < bestD) {

					bestD = d;

					bestIdx = i;

				}

			}

			BulkPartner next = routable.remove(bestIdx);

			ordered.add(next);

			double[] c = codeToLatLng.get(next.code);

			curLat = c[0];

			curLng = c[1];

		}

		partners.clear();

		partners.addAll(ordered);

		partners.addAll(parked);

	}

    // Mirrors the JS recalcDay() formula. Used by schedule/repeat endpoints

    // which create fresh BeatSchedule rows — they need to fill totals from the

    // existing beat_route table, not from anything the client posted.

    // Returns {totalKm, totalMins}.

    private double[] computeDayTotals(int beatId, int dayNumber, String endAction) {

        Beat beat = beatRepository.selectById(beatId);

        if (beat == null) return new double[]{0d, 0d};

        List<BeatRoute> dayRoutes = beatRouteRepository.selectByBeatId(beatId).stream()

                .filter(r -> r.getDayNumber() == dayNumber)

                .sorted(java.util.Comparator.comparingInt(BeatRoute::getSequenceOrder))

                .collect(Collectors.toList());

        if (dayRoutes.isEmpty()) return new double[]{0d, 0d};

        List<Integer> fofoIds = dayRoutes.stream().map(BeatRoute::getFofoId).distinct().collect(Collectors.toList());

        Map<Integer, FofoStore> storeMap = new HashMap<>();

        try {

            for (FofoStore fs : fofoStoreRepository.selectByRetailerIds(fofoIds)) {

                storeMap.put(fs.getId(), fs);

            }

        } catch (Exception ignored) { /* fall through with empty map */ }

        double ROAD_FACTOR = 1.3;

        double AVG_SPEED = 30.0; // km/h

        int VISIT_MINS = 30;

        Double prevLat = parseDoubleOrNull(beat.getStartLatitude());

        Double prevLng = parseDoubleOrNull(beat.getStartLongitude());

        double totalKm = 0d;

        for (BeatRoute r : dayRoutes) {

            FofoStore fs = storeMap.get(r.getFofoId());

            if (fs == null) continue;

            Double curLat = parseDoubleOrNull(fs.getLatitude());

            Double curLng = parseDoubleOrNull(fs.getLongitude());

            if (prevLat != null && prevLng != null && curLat != null && curLng != null) {

                totalKm += haversineKm(prevLat, prevLng, curLat, curLng) * ROAD_FACTOR;

            }

            if (curLat != null && curLng != null) {

                prevLat = curLat;

                prevLng = curLng;

            }

        }

        // Return-home leg only when end_action='HOME'

        if ("HOME".equalsIgnoreCase(endAction)) {

            Double homeLat = parseDoubleOrNull(beat.getStartLatitude());

            Double homeLng = parseDoubleOrNull(beat.getStartLongitude());

            if (prevLat != null && prevLng != null && homeLat != null && homeLng != null) {

                totalKm += haversineKm(prevLat, prevLng, homeLat, homeLng) * ROAD_FACTOR;

            }

        }

        double totalMins = (totalKm / AVG_SPEED) * 60.0 + dayRoutes.size() * VISIT_MINS;

        return new double[]{Math.round(totalKm * 1000d) / 1000d, Math.round(totalMins)};

    }

	// ====================== ASSIGN VISIT ======================

	// Day View "Assign Visit" — lets an admin pick parties (stores) for a specific

	// auth user on a specific date and pushes them as visit tasks to the v2

	// /profitmandi-web/v2/beat-tracking/batch endpoint.

	// List of parties (stores) assigned to this auth user + their dtr.users.id.

	// When date+beatId are passed, each party is also tagged with:

	//   inBeat        = is this store part of the scheduled beat's route on that date

	//   existingAgendas[] = agendas already saved for this store on that date (so the

	//                       modal can pre-fill them and let the user refill rather than re-assign)

	@GetMapping(value = "/beatPlan/assignVisit/parties")

	public ResponseEntity<?> assignVisitParties(

			@RequestParam int authUserId,

			@RequestParam(required = false) String date,

			@RequestParam(required = false) Integer beatId) throws Exception {

		AuthUser au = authRepository.selectById(authUserId);

		if (au == null) return responseSender.badRequest("Auth user not found");

		// Map auth_user → dtr.users via email

		Integer dtrUserId = null;

		try {

			com.spice.profitmandi.dao.entity.dtr.User dtrUser =

					userRepositoryAuto.selectByEmailId(au.getEmailId());

			if (dtrUser != null) dtrUserId = dtrUser.getId();

		} catch (Exception ignored) {

		}

		// Parse optional date

		LocalDate parsedDate = null;

		if (date != null && !date.isEmpty()) {

			try {

				parsedDate = LocalDate.parse(date);

			} catch (Exception ignored) {

			}

		}

		// Build (fofoId → dayNumber) of partners already in the beat's scheduled route for this date

		Set<Integer> inBeatFofoIds = new HashSet<>();

		if (beatId != null && parsedDate != null) {

			final LocalDate dateF = parsedDate; // capture for lambda (parsedDate is reassigned earlier so not effectively final)

			List<BeatSchedule> schedules = beatScheduleRepository.selectByBeatId(beatId);

			BeatSchedule match = schedules.stream()

					.filter(s -> s.getStartDate() != null && s.getStartDate().equals(dateF))

					.findFirst().orElse(null);

			if (match != null) {

				List<BeatRoute> routes = beatRouteRepository.selectByBeatId(beatId);

				routes.stream()

						.filter(r -> r.getDayNumber() == match.getDayNumber() && r.isActive())

						.forEach(r -> inBeatFofoIds.add(r.getFofoId()));

			}

		}

		// Build (fofoId → existingAgendas) and (fofoId → existingDescription) from

		// any already-saved location_tracking rows for this user on this date.

		// Agenda is stored as task_name = "agenda1, agenda2 | OutletName"

		// so we split on " | " to peel the outlet suffix off, then split agendas by ", ".

		// Description is stored on task_description (free text).

		Map<Integer, List<String>> existingAgendaByFofo = new HashMap<>();

		Map<Integer, String> existingDescByFofo = new HashMap<>();

		Map<Integer, Integer> existingTrackingIdByFofo = new HashMap<>();

		if (dtrUserId != null && parsedDate != null) {

			List<com.spice.profitmandi.dao.entity.auth.LocationTracking> existing =

					locationTrackingRepositoryAuto.findByUserAndDate(dtrUserId, parsedDate);

			for (com.spice.profitmandi.dao.entity.auth.LocationTracking lt : existing) {

				if (!"franchisee-visit".equals(lt.getTaskType())) continue;

				if (existingAgendaByFofo.containsKey(lt.getTaskId())) continue; // first wins

				String taskName = lt.getTaskName() == null ? "" : lt.getTaskName();

				String agendaPart = taskName;

				int pipeIdx = taskName.lastIndexOf(" | ");

				if (pipeIdx > 0) agendaPart = taskName.substring(0, pipeIdx);

				List<String> agendas = new ArrayList<>();

				for (String a : agendaPart.split(",")) {

					String trimmed = a.trim();

					if (!trimmed.isEmpty()) agendas.add(trimmed);

				}

				existingAgendaByFofo.put(lt.getTaskId(), agendas);

				existingDescByFofo.put(lt.getTaskId(), lt.getTaskDescription() != null ? lt.getTaskDescription() : "");

				existingTrackingIdByFofo.put(lt.getTaskId(), lt.getId());

			}

		}

		Map<Integer, List<Integer>> mapping = csService.getAuthUserIdPartnerIdMapping();

		List<Integer> fofoIds = mapping.get(authUserId);

		List<Map<String, Object>> parties = new ArrayList<>();

		if (fofoIds != null && !fofoIds.isEmpty()) {

			List<FofoStore> stores = fofoStoreRepository.selectByRetailerIds(fofoIds);

			Map<Integer, CustomRetailer> retailerMap = retailerService.getFofoRetailers(fofoIds);

			for (FofoStore store : stores) {

				if (!store.isActive() || store.isClosed()) continue;

				CustomRetailer retailer = retailerMap.get(store.getId());

				Map<String, Object> p = new HashMap<>();

				p.put("fofoStoreId", store.getId());

				p.put("code", store.getCode());

				p.put("outletName", store.getOutletName() != null ? store.getOutletName()

						: (retailer != null ? retailer.getBusinessName() : "Store #" + store.getId()));

				p.put("latitude", store.getLatitude());

				p.put("longitude", store.getLongitude());

				p.put("city", retailer != null && retailer.getAddress() != null ? retailer.getAddress().getCity() : null);

				p.put("inBeat", inBeatFofoIds.contains(store.getId()));

				p.put("existingAgendas", existingAgendaByFofo.getOrDefault(store.getId(), new ArrayList<>()));

				p.put("existingDescription", existingDescByFofo.getOrDefault(store.getId(), ""));

				p.put("existingTrackingId", existingTrackingIdByFofo.get(store.getId()));

				parties.add(p);

			}

			// In-beat first, then by code

			parties.sort((a, b) -> {

				boolean ai = Boolean.TRUE.equals(a.get("inBeat"));

				boolean bi = Boolean.TRUE.equals(b.get("inBeat"));

				if (ai != bi) return ai ? -1 : 1;

				return String.valueOf(a.get("code")).compareToIgnoreCase(String.valueOf(b.get("code")));

			});

		}

		Map<String, Object> result = new HashMap<>();

		result.put("dtrUserId", dtrUserId);

		result.put("authUserId", authUserId);

		result.put("userName", au.getFirstName() + " " + au.getLastName());

		result.put("parties", parties);

		result.put("agendaOptions", com.spice.profitmandi.dao.enumuration.dtr.VisitAgenda.labels());

		return responseSender.ok(result);

	}

	// Submit assignment — accepts a JSON body, builds the v2 payload, posts it

	@PostMapping(value = "/beatPlan/assignVisit/submit")

	public ResponseEntity<?> assignVisitSubmit(

			HttpServletRequest request,

			@org.springframework.web.bind.annotation.RequestBody Map<String, Object> body) throws Exception {

		Integer authUserId = body.get("authUserId") != null ? ((Number) body.get("authUserId")).intValue() : null;

		String planDate = (String) body.get("planDate");

		List<Map<String, Object>> selected = (List<Map<String, Object>>) body.get("parties");

		if (authUserId == null || planDate == null || selected == null || selected.isEmpty()) {

			return responseSender.badRequest("authUserId, planDate and parties are required");

		}

		// Defence-in-depth: Assign Visit is L2-and-above only (mirrors the hidden UI).

		if (!canEditBeat(currentUser(request))) {

			return responseSender.badRequest("Assigning a visit is restricted to L2 and above.");

		}

		AuthUser au = authRepository.selectById(authUserId);

		if (au == null) return responseSender.badRequest("Auth user not found");

		// Map auth → dtr.users.id (this is the userId the v2 endpoint expects)

		com.spice.profitmandi.dao.entity.dtr.User dtrUser;

		try {

			dtrUser = userRepositoryAuto.selectByEmailId(au.getEmailId());

		} catch (Exception e) {

			return responseSender.badRequest("Failed to look up dtr.users for this auth user");

		}

		if (dtrUser == null) {

			return responseSender.badRequest("No dtr.users record found for auth user " + authUserId);

		}

		int dtrUserId = dtrUser.getId();

		// Persist directly via the shared DAO — mirrors BeatTrackingController.createBatch

		// in profitmandi-web. We can't autowire a controller across WARs, but

		// LocationTrackingRepository lives in profitmandi-dao and is shared.

		LocalDate taskDate;

		try {

			taskDate = LocalDate.parse(planDate);

		} catch (Exception e) {

			return responseSender.badRequest("Invalid planDate (expected yyyy-MM-dd): " + planDate);

		}

		// Existing rows for this user on this date — keyed by fofoStoreId.

		// If a row already exists for a party, we UPDATE its agenda instead of

		// creating a duplicate (this is the "refill agenda" path for already-

		// assigned parties).

		Map<Integer, com.spice.profitmandi.dao.entity.auth.LocationTracking> existingByFofo = new HashMap<>();

		for (com.spice.profitmandi.dao.entity.auth.LocationTracking lt :

				locationTrackingRepositoryAuto.findByUserAndDate(dtrUserId, taskDate)) {

			if (!"franchisee-visit".equals(lt.getTaskType())) continue;

			existingByFofo.putIfAbsent(lt.getTaskId(), lt);

		}

		// Defence-in-depth: Assign Visit is only valid for today's run. Hiding the

		// button on the UI isn't enough — block at the API too.

		if (!taskDate.equals(LocalDate.now())) {

			return responseSender.badRequest("Visits can only be assigned for today's date (" + LocalDate.now() + ")");

		}

		LocalDateTime now = LocalDateTime.now();

		int createdCount = 0, updatedCount = 0;

		for (Map<String, Object> p : selected) {

			Integer fofoStoreId = ((Number) p.get("fofoStoreId")).intValue();

			String outletName = (String) p.get("outletName");

			String lat = (String) p.get("latitude");

			String lng = (String) p.get("longitude");

			String description = (String) p.get("description");

			if (description != null) description = description.trim();

			if (description == null) description = "";

			// Multi-agenda: accept agendas[] (new format) or fall back to agenda (legacy single)

			List<String> agendas = new ArrayList<>();

			Object rawAgendas = p.get("agendas");

			if (rawAgendas instanceof List) {

				for (Object o : (List<?>) rawAgendas) {

					if (o != null) {

						String s = String.valueOf(o).trim();

						if (!s.isEmpty()) agendas.add(s);

					}

				}

			}

			if (agendas.isEmpty()) {

				String single = (String) p.get("agenda");

				if (single != null && !single.trim().isEmpty()) agendas.add(single.trim());

			}

			if (agendas.isEmpty()) agendas.add("Visit");

			String agendaJoined = String.join(", ", agendas);

			String visitLocation = (lat != null && lng != null && !lat.isEmpty() && !lng.isEmpty())

					? (lat + "," + lng) : "0.0000,0.0000";

			String displayName = (outletName != null && !outletName.isEmpty()) ? outletName : ("Store #" + fofoStoreId);

			String newTaskName = agendaJoined + " | " + displayName;

			com.spice.profitmandi.dao.entity.auth.LocationTracking existing = existingByFofo.get(fofoStoreId);

			if (existing != null) {

				// Refill — agenda (task_name), description, and visit location change

				existing.setTaskName(newTaskName);

				existing.setTaskDescription(description);

				existing.setVisitLocation(visitLocation);

				existing.setUpdatedTimestamp(now);

				locationTrackingRepositoryAuto.persist(existing);

				updatedCount++;

				continue;

			}

			com.spice.profitmandi.dao.entity.auth.LocationTracking row =

					new com.spice.profitmandi.dao.entity.auth.LocationTracking();

			row.setUserId(dtrUserId);

			row.setDeviceId("0");

			row.setTaskId(fofoStoreId);

			row.setTaskDate(taskDate);

			row.setTaskName(newTaskName);

			row.setTaskDescription(description);

			row.setTaskType("franchisee-visit");

			row.setMarkType(String.valueOf(ProfitMandiConstants.MARK_TYPE.PENDING));

			row.setAddress("");

			row.setVisitLocation(visitLocation);

			row.setCheckInLatLng("0.0000,0.0000");

			row.setCheckOutLatLng("0.0000,0.0000");

			row.setCheckInTime(java.time.LocalTime.MIDNIGHT);

			row.setCheckOutTime(java.time.LocalTime.MIDNIGHT);

			row.setTransitTime(java.time.LocalTime.MIDNIGHT);

			row.setTimeSpent(java.time.LocalTime.MIDNIGHT);

			row.setEstimatedTime(java.time.LocalTime.MIDNIGHT);

			row.setSessionStartTime(java.time.LocalTime.MIDNIGHT);

			row.setSessionEndTime(java.time.LocalTime.MIDNIGHT);

			row.setTotalDistance("0.0");

			row.setStatus(false);

			row.setCreatedTimestamp(now);

			row.setUpdatedTimestamp(now);

			// Do NOT try/catch this — if persist throws, let it propagate so

			// @Transactional(rollbackFor = Throwable.class) rolls back cleanly.

			locationTrackingRepositoryAuto.persist(row);

			createdCount++;

		}

		LOGGER.info("assignVisit dtrUserId={} created={} updated={}", dtrUserId, createdCount, updatedCount);

		Map<String, Object> result = new HashMap<>();

		result.put("status", true);

		result.put("createdCount", createdCount);

		result.put("updatedCount", updatedCount);

		result.put("dtrUserId", dtrUserId);

		StringBuilder msg = new StringBuilder();

		if (createdCount > 0)

			msg.append(createdCount).append(" new visit").append(createdCount == 1 ? "" : "s").append(" assigned");

		if (updatedCount > 0) {

			if (msg.length() > 0) msg.append(", ");

			msg.append(updatedCount).append(" existing agenda").append(updatedCount == 1 ? "" : "s").append(" refilled");

		}

		msg.append(" for ").append(au.getFirstName()).append(" ").append(au.getLastName());

		result.put("message", msg.toString());

		return responseSender.ok(result);

	}

	// ====================== DEFERRED PARTNERS ======================

	// Heads review partners that weren't visited on their planned day and act on

	// them. The deferral lifecycle lives in user.beat_deferred_visit (separate

	// from the raw location_tracking event log). Detection = explicit

	// (mark_type='DEFERRED') + derived (planned beat_route minus completed visits).

	// Page

	@GetMapping(value = "/beatPlan/deferredView")

	public String deferredView(HttpServletRequest request, Model model) throws ProfitMandiBusinessException {

		model.addAttribute("escalationTypes", visibleLevelsFor(request));

		return "beat-plan-deferred";

	}

	// List (syncs the table first, then returns the head's downline deferrals).

	@GetMapping(value = "/beatPlan/deferred")

	public ResponseEntity<?> deferredList(

			HttpServletRequest request,

			@RequestParam(required = false) String startDate,

			@RequestParam(required = false) String endDate) throws Exception {

		LocalDate start, end;

		try {

			start = (startDate == null || startDate.isEmpty()) ? LocalDate.now().minusDays(7) : LocalDate.parse(startDate);

			end = (endDate == null || endDate.isEmpty()) ? LocalDate.now() : LocalDate.parse(endDate);

		} catch (Exception e) {

			return responseSender.badRequest("Invalid date — expected yyyy-MM-dd");

		}

		LoginDetails ld = cookiesProcessor.getCookiesObject(request);

		AuthUser me = (ld != null) ? authRepository.selectByEmailOrMobile(ld.getEmailId()) : null;

		if (me == null) return responseSender.unauthorized("Not logged in");

		// PURE READ. Deferrals are persisted at the write point (BeatTrackingController,

		// when mark_type='DEFERRED' is recorded) — this endpoint never writes.

		List<BeatDeferredVisit> source;

		if (isSuperAdmin(me)) {

			source = beatDeferredVisitRepository.selectByDateRange(start, end);

		} else {

			Set<Integer> downline = new HashSet<>(authService.getAllReportees(me.getId()));

			downline.add(me.getId());

			source = beatDeferredVisitRepository.selectByAuthUserIdsAndDateRange(new ArrayList<>(downline), start, end);

		}

		List<BeatDeferredVisit> rows = source.stream()

				.filter(r -> "DEFERRED".equals(r.getStatus()))

				.collect(Collectors.toList());

		// ---- nextScheduledDate (info only: does a future run already cover it?) ----

		// Only meaningful for partner visits (leads aren't on beat_route). Purely a

		// hint — the row stays actionable even when auto-covered, since the next run

		// could be far off.

		Map<Integer, Map<Integer, LocalDate>> coverCache = new HashMap<>();

		Map<Integer, LocalDate> nextByRowId = new HashMap<>();

		for (BeatDeferredVisit r : rows) {

			if (!"franchisee-visit".equals(r.getTaskType())) continue;

			Map<Integer, LocalDate> cover = coverCache.computeIfAbsent(r.getAuthUserId(), this::computeFutureCover);

			LocalDate next = cover.get(r.getFofoId());

			if (next != null) nextByRowId.put(r.getId(), next);

		}

		// ---- resolve user names (display name + type already denormalized on the row) ----

		Set<Integer> authIds = rows.stream().map(BeatDeferredVisit::getAuthUserId).collect(Collectors.toSet());

		Map<Integer, AuthUser> userMap = new HashMap<>();

		if (!authIds.isEmpty())

			authRepository.selectByIds(new ArrayList<>(authIds)).forEach(u -> userMap.put(u.getId(), u));

		List<Map<String, Object>> out = new ArrayList<>();

		for (BeatDeferredVisit r : rows) {

			AuthUser u = userMap.get(r.getAuthUserId());

			boolean isLead = "lead".equalsIgnoreCase(r.getTaskType());

			boolean isOffice = "office-visit".equalsIgnoreCase(r.getTaskType());

			Map<String, Object> row = new HashMap<>();

			row.put("id", r.getId());

			row.put("authUserId", r.getAuthUserId());

			row.put("userName", u != null ? (u.getFirstName() + " " + u.getLastName()) : ("User #" + r.getAuthUserId()));

			row.put("fofoStoreId", r.getFofoId());

			row.put("name", r.getDisplayName() != null ? r.getDisplayName() : ("#" + r.getFofoId()));

			row.put("type", isLead ? "Lead" : (isOffice ? "Office" : "Visit"));

			row.put("deferredDate", r.getDeferredDate() != null ? r.getDeferredDate().toString() : null);

			row.put("reason", r.getReason());

			row.put("status", r.getStatus());

			LocalDate next = nextByRowId.get(r.getId());

			row.put("nextScheduledDate", next != null ? next.toString() : null);

			out.add(row);

		}

		out.sort((a, c) -> String.valueOf(a.get("deferredDate")).compareTo(String.valueOf(c.get("deferredDate"))));

		Map<String, Object> result = new HashMap<>();

		result.put("rows", out);

		result.put("startDate", start.toString());

		result.put("endDate", end.toString());

		return responseSender.ok(result);

	}

	// Head action on a deferral: reschedule (one-off visit, or into an existing

	// beat-day) or cancel. Never edits the beat template.

	@PostMapping(value = "/beatPlan/deferred/action")

	public ResponseEntity<?> deferredAction(

			HttpServletRequest request,

			@org.springframework.web.bind.annotation.RequestBody Map<String, Object> body) throws Exception {

		Integer deferredId = body.get("deferredId") != null ? ((Number) body.get("deferredId")).intValue() : null;

		String action = (String) body.get("action");

		String toDateStr = (String) body.get("toDate");

		if (deferredId == null || action == null)

			return responseSender.badRequest("deferredId and action are required");

		LoginDetails ld = cookiesProcessor.getCookiesObject(request);

		AuthUser me = (ld != null) ? authRepository.selectByEmailOrMobile(ld.getEmailId()) : null;

		if (me == null) return responseSender.unauthorized("Not logged in");

		BeatDeferredVisit d = beatDeferredVisitRepository.selectById(deferredId);

		if (d == null) return responseSender.badRequest("Deferred record not found");

		LocalDateTime now = LocalDateTime.now();

		if ("cancel".equalsIgnoreCase(action)) {

			d.setStatus(String.valueOf(ProfitMandiConstants.MARK_TYPE.CANCELLED));

			d.setActionBy(me.getId());

			d.setUpdatedTimestamp(now);

			// Optional cancel reason — overlay onto the reason column. Original

			// deferred-reason is preserved as a suffix so we keep the audit trail.

			String cancelReason = body.get("reason") != null ? String.valueOf(body.get("reason")).trim() : "";

			if (!cancelReason.isEmpty()) {

				String prev = d.getReason() != null ? d.getReason() : "";

				d.setReason("Cancelled: " + cancelReason + (prev.isEmpty() ? "" : " | Original: " + prev));

			}

			beatDeferredVisitRepository.persist(d);

			Map<String, Object> ok = new HashMap<>();

			ok.put("status", true);

			ok.put("message", "Deferred visit cancelled");

			return responseSender.ok(ok);

		}

		// reschedule_oneoff | reschedule_beat

		if (toDateStr == null || toDateStr.isEmpty())

			return responseSender.badRequest("toDate is required to reschedule");

		LocalDate toDate;

		try {

			toDate = LocalDate.parse(toDateStr);

		} catch (Exception e) {

			return responseSender.badRequest("Invalid toDate (yyyy-MM-dd)");

		}

		// Reschedule must land on a STRICTLY future date — today is already in progress.

		if (!toDate.isAfter(LocalDate.now()))

			return responseSender.badRequest("Reschedule date must be in the future (today is already in progress).");

		if ("reschedule_beat".equalsIgnoreCase(action)) {

			boolean hasBeat = beatRepository.selectActiveByAuthUserId(d.getAuthUserId()).stream()

					.flatMap(b -> beatScheduleRepository.selectByBeatId(b.getId()).stream())

					.anyMatch(s -> s.getStartDate() != null && s.getStartDate().equals(toDate));

			if (!hasBeat)

				return responseSender.badRequest("No beat is scheduled for this user on " + toDateStr + ". Pick another date or use a one-off visit.");

		}

		// Resolve dtr user, then create a PENDING task on toDate. Reuse the

		// denormalized name + type (works for both partner visits and leads — for

		// leads, looking up fofo_store would be the wrong id space). For visits we

		// still try to pull lat/lng for the visit location.

		Integer dtrId = resolveDtrId(d.getAuthUserId(), new HashMap<>());

		if (dtrId == null) return responseSender.badRequest("No dtr.users record for this sales person");

		boolean isLead = "lead".equalsIgnoreCase(d.getTaskType());

		boolean isOffice = "office-visit".equalsIgnoreCase(d.getTaskType());

		String visitLocation = "0.0000,0.0000";

		if (isOffice) {

			// Office stops resolve lat/lng from logistics.company_office.

			try {

				com.spice.profitmandi.dao.entity.logistics.CompanyOffice o = companyOfficeRepository.selectById(d.getFofoId());

				if (o != null) visitLocation = o.getLat() + "," + o.getLng();

			} catch (Exception ignored) {

			}

		} else if (!isLead) {

			try {

				List<FofoStore> ss = fofoStoreRepository.selectByRetailerIds(java.util.Collections.singletonList(d.getFofoId()));

				if (!ss.isEmpty()) {

					FofoStore fs = ss.get(0);

					if (fs.getLatitude() != null && fs.getLongitude() != null

							&& !fs.getLatitude().isEmpty() && !fs.getLongitude().isEmpty()) {

						visitLocation = fs.getLatitude() + "," + fs.getLongitude();

					}

				}

			} catch (Exception ignored) {

			}

		}

		String taskName = d.getDisplayName() != null ? d.getDisplayName()

				: ((d.getReason() != null ? d.getReason() : "Rescheduled") + " | #" + d.getFofoId());

		com.spice.profitmandi.dao.entity.auth.LocationTracking row = new com.spice.profitmandi.dao.entity.auth.LocationTracking();

		row.setUserId(dtrId);

		row.setDeviceId("0");

		row.setTaskId(d.getFofoId());

		row.setTaskDate(toDate);

		row.setTaskName(taskName);

		row.setTaskDescription("Rescheduled from " + d.getDeferredDate());

		row.setTaskType(d.getTaskType() != null ? d.getTaskType() : "franchisee-visit");

		row.setMarkType(String.valueOf(ProfitMandiConstants.MARK_TYPE.PENDING));

		row.setAddress("");

		row.setVisitLocation(visitLocation);

		row.setCheckInLatLng("0.0000,0.0000");

		row.setCheckOutLatLng("0.0000,0.0000");

		row.setCheckInTime(java.time.LocalTime.MIDNIGHT);

		row.setCheckOutTime(java.time.LocalTime.MIDNIGHT);

		row.setTransitTime(java.time.LocalTime.MIDNIGHT);

		row.setTimeSpent(java.time.LocalTime.MIDNIGHT);

		row.setEstimatedTime(java.time.LocalTime.MIDNIGHT);

		row.setSessionStartTime(java.time.LocalTime.MIDNIGHT);

		row.setSessionEndTime(java.time.LocalTime.MIDNIGHT);

		row.setTotalDistance("0.0");

		row.setStatus(false);

		row.setCreatedTimestamp(now);

		row.setUpdatedTimestamp(now);

		locationTrackingRepositoryAuto.persist(row);

		d.setStatus(String.valueOf(ProfitMandiConstants.MARK_TYPE.RESCHEDULED));

		d.setRescheduledToDate(toDate);

		d.setActionBy(me.getId());

		d.setUpdatedTimestamp(now);

		beatDeferredVisitRepository.persist(d);

		Map<String, Object> ok = new HashMap<>();

		ok.put("status", true);

		ok.put("message", "Visit rescheduled to " + toDateStr);

		return responseSender.ok(ok);

	}

	// Drop a deferred item into a specific upcoming BEAT run (chosen from the beat

	// calendar). Lead → a lead_route row on that beat/date (renders as a lead stop).

	// Partner visit → appended to that beat's route for the date's day_number.

	// The beat plan calendar then shows it. Marks the deferral RESCHEDULED.

	@PostMapping(value = "/beatPlan/deferred/assignToBeat")

	public ResponseEntity<?> deferredAssignToBeat(

			HttpServletRequest request,

			@org.springframework.web.bind.annotation.RequestBody Map<String, Object> body) throws Exception {

		Integer deferredId = body.get("deferredId") != null ? ((Number) body.get("deferredId")).intValue() : null;

		Integer beatId = body.get("beatId") != null ? ((Number) body.get("beatId")).intValue() : null;

		String dateStr = (String) body.get("date");

		if (deferredId == null || beatId == null || dateStr == null)

			return responseSender.badRequest("deferredId, beatId and date are required");

		LoginDetails ld = cookiesProcessor.getCookiesObject(request);

		AuthUser me = (ld != null) ? authRepository.selectByEmailOrMobile(ld.getEmailId()) : null;

		if (me == null) return responseSender.unauthorized("Not logged in");

		LocalDate date;

		try {

			date = LocalDate.parse(dateStr);

		} catch (Exception e) {

			return responseSender.badRequest("Invalid date (yyyy-MM-dd)");

		}

		// Drop-onto-beat must land on a STRICTLY future date — today is already in progress.

		if (!date.isAfter(LocalDate.now()))

			return responseSender.badRequest("Pick a future date — today is already in progress.");

		BeatDeferredVisit d = beatDeferredVisitRepository.selectById(deferredId);

		if (d == null) return responseSender.badRequest("Deferred record not found");

		// A deferral can only move FORWARD — never onto the day it was deferred or earlier.

		if (d.getDeferredDate() != null && !date.isAfter(d.getDeferredDate())) {

			return responseSender.badRequest("A deferred item can only be moved to a date after "

					+ d.getDeferredDate() + " (it was deferred that day).");

		}

		Beat beat = beatRepository.selectById(beatId);

		if (beat == null) return responseSender.badRequest("Beat not found");

		// The beat must actually run on the chosen date — get that run's day number.

		BeatSchedule sched = beatScheduleRepository.selectByBeatId(beatId).stream()

				.filter(s -> s.getStartDate() != null && s.getStartDate().equals(date))

				.findFirst().orElse(null);

		if (sched == null) return responseSender.badRequest("That beat is not scheduled on " + dateStr);

		LocalDateTime now = LocalDateTime.now();

		boolean isLead = "lead".equalsIgnoreCase(d.getTaskType());

		if (isLead) {

			// Avoid duplicating the same lead on the same beat/date

			boolean exists = leadRouteRepository.selectByBeatId(beatId).stream()

					.anyMatch(lr -> lr.getLeadId() == d.getFofoId()

							&& date.equals(lr.getScheduleDate())

							&& !"CANCELLED".equals(lr.getStatus()));

			if (!exists) {

				LeadRoute lr = new LeadRoute();

				lr.setBeatId(beatId);

				lr.setLeadId(d.getFofoId());

				lr.setScheduleDate(date);

				lr.setSequenceOrder(9999); // append; planner can reorder

				lr.setStatus("APPROVED");

				lr.setApprovedBy(me.getId());

				lr.setApprovedTimestamp(now);

				lr.setCreatedTimestamp(now);

				lr.setUpdatedTimestamp(now);

				leadRouteRepository.persist(lr);

			}

		} else {

			// Partner visit → append to that beat's route for the date's day number,

			// if not already present on that day.

			boolean exists = beatRouteRepository.selectByBeatId(beatId).stream()

					.anyMatch(r -> r.getFofoId() == d.getFofoId() && r.getDayNumber() == sched.getDayNumber() && r.isActive());

			if (!exists) {

				int nextSeq = beatRouteRepository.selectByBeatId(beatId).stream()

						.filter(r -> r.getDayNumber() == sched.getDayNumber())

						.mapToInt(BeatRoute::getSequenceOrder).max().orElse(-1) + 1;

				BeatRoute br = new BeatRoute();

				br.setBeatId(beatId);

				br.setFofoId(d.getFofoId());

				br.setVisitType(com.spice.profitmandi.dao.enumuration.dtr.BeatVisitType.PARTNER);

				br.setDayNumber(sched.getDayNumber());

				br.setSequenceOrder(nextSeq);

				br.setActive(true);

				beatRouteRepository.persist(br);

			}

		}

		d.setStatus(String.valueOf(ProfitMandiConstants.MARK_TYPE.RESCHEDULED));

		d.setRescheduledToDate(date);

		d.setActionBy(me.getId());

		d.setUpdatedTimestamp(now);

		beatDeferredVisitRepository.persist(d);

		Map<String, Object> ok = new HashMap<>();

		ok.put("status", true);

		ok.put("message", (isLead ? "Lead" : "Partner") + " added to beat '" + beat.getName() + "' on " + dateStr);

		return responseSender.ok(ok);

	}

	// ==================== ASSIGN LEADS ONTO BEATS ====================

	// A rep's assigned leads can be routed onto a beat from two surfaces:

	//   • Route Planner "Assigned Leads" list → single lead, calendar-chip picks beat+date

	//   • Day View "Add Lead" modal           → bulk write onto a known beat+date

	// Both converge on the same dated, APPROVED lead_route write (writeLeadRoute),

	// mirroring VisitRequestController.approveSchedule and deferredAssignToBeat's

	// lead branch. Nothing downstream changes — getBeatVisits and the

	// /visit-approvals/beat-route feed already render lead_route rows for the run.

	// Active/open lead colours a manager can still route (matches getOpenLead's

	// All → yellow+green expansion). Red/other are dropped as not-worth-visiting.

	private static final Set<String> ROUTABLE_LEAD_COLORS =

			new HashSet<>(Arrays.asList("yellow", "green"));

	// Can the caller see the selected user's leads? Super-admin sees everyone;

	// otherwise the user must be the caller or in their downline.

	private boolean canViewUserLeads(AuthUser me, int authUserId) {

		if (me == null) return false;

		if (isSuperAdmin(me)) return true;

		if (me.getId() == authUserId) return true;

		return new HashSet<>(authService.getAllReportees(me.getId())).contains(authUserId);

	}

	// GET /beatPlan/assignedLeads?authUserId=&beatId=&date=

	// Lists the selected user's active/open leads (pending + follow-up, yellow/green).

	// When beatId+date are supplied (Day View), each lead is tagged alreadyOnBeat if

	// it already has a non-cancelled lead_route on that beat+date.

	@GetMapping(value = "/beatPlan/assignedLeads")

	public ResponseEntity<?> assignedLeads(

			HttpServletRequest request,

			@RequestParam int authUserId,

			@RequestParam(required = false) Integer beatId,

			@RequestParam(required = false) String date) throws ProfitMandiBusinessException {

		AuthUser me = currentUser(request);

		if (me == null) return responseSender.unauthorized("Not logged in");

		if (!canViewUserLeads(me, authUserId)) {

			// Not visible to this manager → empty (mirrors VisitRequestController.list).

			return responseSender.ok(Collections.singletonMap("rows", new ArrayList<>()));

		}

		// Active/open only — pending + follow-up.

		List<Lead> leads = new ArrayList<>();

		leads.addAll(leadRepository.selectByAssignAuthIdAndStatus(

				authUserId, com.spice.profitmandi.dao.enumuration.dtr.LeadStatus.pending));

		leads.addAll(leadRepository.selectByAssignAuthIdAndStatus(

				authUserId, com.spice.profitmandi.dao.enumuration.dtr.LeadStatus.followUp));

		// Leads already on this beat+date (Day View only), to flag dupes in the picker.

		LocalDate onDate = (date != null && !date.isEmpty()) ? LocalDate.parse(date) : null;

		Set<Integer> alreadyOnBeat = new HashSet<>();

		if (beatId != null && onDate != null) {

			for (LeadRoute lr : leadRouteRepository.selectByBeatId(beatId)) {

				if (onDate.equals(lr.getScheduleDate()) && !"CANCELLED".equals(lr.getStatus())) {

					alreadyOnBeat.add(lr.getLeadId());

				}

			}

		}

		// Colour-filter + dedupe, then batch-resolve approved geo (avoids N+1).

		List<Lead> routable = new ArrayList<>();

		Set<Integer> seen = new HashSet<>();

		for (Lead lead : leads) {

			if (!seen.add(lead.getId())) continue;

			String color = lead.getColor() != null ? lead.getColor().toLowerCase() : "";

			if (!ROUTABLE_LEAD_COLORS.contains(color)) continue;

			routable.add(lead);

		}

		Set<Integer> withGeo = new HashSet<>();

		if (!routable.isEmpty()) {

			List<Integer> ids = routable.stream().map(Lead::getId).collect(Collectors.toList());

			for (com.spice.profitmandi.dao.entity.user.LeadLiveLocation loc :

					leadLiveLocationRepositoryAuto.selectByLeadIds(ids)) {

				if (loc.getStatus() != null && "APPROVED".equals(loc.getStatus().name())) {

					withGeo.add(loc.getLeadId());

				}

			}

		}

		List<Map<String, Object>> rows = new ArrayList<>();

		for (Lead lead : routable) {

			Map<String, Object> m = new HashMap<>();

			m.put("leadId", lead.getId());

			String name = ((lead.getFirstName() != null ? lead.getFirstName() : "") + " "

					+ (lead.getLastName() != null ? lead.getLastName() : "")).trim();

			m.put("leadName", name.isEmpty() ? ("Lead #" + lead.getId()) : name);

			m.put("outletName", lead.getOutLetName());

			m.put("mobile", lead.getLeadMobile());

			m.put("city", lead.getCity());

			m.put("state", lead.getState());

			m.put("stage", lead.getEffectiveStage() != null ? lead.getEffectiveStage().name() : "");

			m.put("color", lead.getColor());

			m.put("hasGeo", withGeo.contains(lead.getId()));

			m.put("alreadyOnBeat", alreadyOnBeat.contains(lead.getId()));

			rows.add(m);

		}

		return responseSender.ok(Collections.singletonMap("rows", rows));

	}

	// Shared, idempotent lead_route write. Returns true when a new row is created,

	// false when the lead is already on that (beat, date). Best-effort nudges the

	// lead forward to BEAT_PLANNED. Callers are responsible for the beat-runs-on-date

	// and future-date guards. Mirrors deferredAssignToBeat's lead branch.

	private boolean writeLeadRoute(int beatId, int leadId, LocalDate date, int approverAuthId) {

		boolean exists = leadRouteRepository.selectByBeatId(beatId).stream()

				.anyMatch(lr -> lr.getLeadId() == leadId

						&& date.equals(lr.getScheduleDate())

						&& !"CANCELLED".equals(lr.getStatus()));

		if (exists) return false;

		LocalDateTime now = LocalDateTime.now();

		LeadRoute lr = new LeadRoute();

		lr.setBeatId(beatId);

		lr.setLeadId(leadId);

		lr.setScheduleDate(date);

		lr.setSequenceOrder(9999); // append; planner can reorder

		lr.setStatus("APPROVED");

		lr.setApprovedBy(approverAuthId);

		lr.setApprovedTimestamp(now);

		lr.setCreatedTimestamp(now);

		lr.setUpdatedTimestamp(now);

		leadRouteRepository.persist(lr);

		advanceLeadToBeatPlanned(leadId);

		return true;

	}

	// Best-effort: move a lead forward to BEAT_PLANNED when it's still in an earlier

	// happy-path stage. Never regresses a VISITED+ lead and never aborts the caller's

	// write on failure (the legacy status is kept in sync via toLegacyStatus()).

	private void advanceLeadToBeatPlanned(int leadId) {

		try {

			Lead lead = leadRepository.selectById(leadId);

			if (lead == null) return;

			com.spice.profitmandi.dao.enumuration.dtr.LeadStage cur = lead.getEffectiveStage();

			boolean beforeBeatPlanned =

					cur == com.spice.profitmandi.dao.enumuration.dtr.LeadStage.NEW

							|| cur == com.spice.profitmandi.dao.enumuration.dtr.LeadStage.ASSIGNED

							|| cur == com.spice.profitmandi.dao.enumuration.dtr.LeadStage.CONTACTED

							|| cur == com.spice.profitmandi.dao.enumuration.dtr.LeadStage.QUALIFIED;

			if (!beforeBeatPlanned) return;

			com.spice.profitmandi.dao.enumuration.dtr.LeadStage target =