Initial commit: Import existing Laravel project

app/Http/Controllers/AttachmentController.php

@@ -0,0 +1,33 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\Attachment;
+use Illuminate\Support\Facades\Storage;
+use Illuminate\Support\Facades\Gate;
+
+class AttachmentController extends Controller
+{
+    /**
+     * Affiche/télécharge de manière sécurisée une pièce jointe.
+     */
+    public function show(Attachment $attachment)
+    {
+        // On vérifie si l'utilisateur a le droit de voir la commande liée à cette pièce jointe
+        $order = $attachment->order;
+        
+        Gate::authorize('view', $order);
+
+        // Si le fichier n'existe pas dans le stockage public
+        if (!Storage::disk('public')->exists($attachment->file_path)) {
+            abort(404, 'Fichier non trouvé.');
+        }
+
+        $path = Storage::disk('public')->path($attachment->file_path);
+
+        // On renvoie le fichier pour affichage inline (utile pour les PDF/images)
+        return response()->file($path, [
+            'Content-Disposition' => 'inline; filename="' . basename($attachment->file_name) . '"'
+        ]);
+    }
+}

app/Http/Controllers/Auth/AuthenticatedSessionController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Auth\LoginRequest;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Route;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class AuthenticatedSessionController extends Controller
+{
+    /**
+     * Display the login view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/Login', [
+            'canResetPassword' => Route::has('password.request'),
+            'status' => session('status'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming authentication request.
+     */
+    public function store(LoginRequest $request): RedirectResponse
+    {
+        $request->authenticate();
+
+        $request->session()->regenerate();
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+
+    /**
+     * Destroy an authenticated session.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        Auth::guard('web')->logout();
+
+        $request->session()->invalidate();
+
+        $request->session()->regenerateToken();
+
+        return redirect('/');
+    }
+}

app/Http/Controllers/Auth/ConfirmablePasswordController.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ConfirmablePasswordController extends Controller
+{
+    /**
+     * Show the confirm password view.
+     */
+    public function show(): Response
+    {
+        return Inertia::render('Auth/ConfirmPassword');
+    }
+
+    /**
+     * Confirm the user's password.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if (! Auth::guard('web')->validate([
+            'email' => $request->user()->email,
+            'password' => $request->password,
+        ])) {
+            throw ValidationException::withMessages([
+                'password' => __('auth.password'),
+            ]);
+        }
+
+        $request->session()->put('auth.password_confirmed_at', time());
+
+        return redirect()->intended(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/EmailVerificationNotificationController.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+
+class EmailVerificationNotificationController extends Controller
+{
+    /**
+     * Send a new email verification notification.
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false));
+        }
+
+        $request->user()->sendEmailVerificationNotification();
+
+        return back()->with('status', 'verification-link-sent');
+    }
+}

app/Http/Controllers/Auth/EmailVerificationPromptController.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class EmailVerificationPromptController extends Controller
+{
+    /**
+     * Display the email verification prompt.
+     */
+    public function __invoke(Request $request): RedirectResponse|Response
+    {
+        return $request->user()->hasVerifiedEmail()
+                    ? redirect()->intended(route('dashboard', absolute: false))
+                    : Inertia::render('Auth/VerifyEmail', ['status' => session('status')]);
+    }
+}

app/Http/Controllers/Auth/NewPasswordController.php

@@ -0,0 +1,69 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\PasswordReset;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+use Illuminate\Validation\Rules;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class NewPasswordController extends Controller
+{
+    /**
+     * Display the password reset view.
+     */
+    public function create(Request $request): Response
+    {
+        return Inertia::render('Auth/ResetPassword', [
+            'email' => $request->email,
+            'token' => $request->route('token'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming new password request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'token' => 'required',
+            'email' => 'required|email',
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        // Here we will attempt to reset the user's password. If it is successful we
+        // will update the password on an actual user model and persist it to the
+        // database. Otherwise we will parse the error and return the response.
+        $status = Password::reset(
+            $request->only('email', 'password', 'password_confirmation', 'token'),
+            function ($user) use ($request) {
+                $user->forceFill([
+                    'password' => Hash::make($request->password),
+                    'remember_token' => Str::random(60),
+                ])->save();
+
+                event(new PasswordReset($user));
+            }
+        );
+
+        // If the password was successfully reset, we will redirect the user back to
+        // the application's home authenticated view. If there is an error we can
+        // redirect them back to where they came from with their error message.
+        if ($status == Password::PASSWORD_RESET) {
+            return redirect()->route('login')->with('status', __($status));
+        }
+
+        throw ValidationException::withMessages([
+            'email' => [trans($status)],
+        ]);
+    }
+}

app/Http/Controllers/Auth/PasswordController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules\Password;
+
+class PasswordController extends Controller
+{
+    /**
+     * Update the user's password.
+     */
+    public function update(Request $request): RedirectResponse
+    {
+        $validated = $request->validate([
+            'current_password' => ['required', 'current_password'],
+            'password' => ['required', Password::defaults(), 'confirmed'],
+        ]);
+
+        $request->user()->update([
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        return back();
+    }
+}

app/Http/Controllers/Auth/PasswordResetLinkController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class PasswordResetLinkController extends Controller
+{
+    /**
+     * Display the password reset link request view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/ForgotPassword', [
+            'status' => session('status'),
+        ]);
+    }
+
+    /**
+     * Handle an incoming password reset link request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'email' => 'required|email',
+        ]);
+
+        // We will send the password reset link to this user. Once we have attempted
+        // to send the link, we will examine the response then see the message we
+        // need to show to the user. Finally, we'll send out a proper response.
+        $status = Password::sendResetLink(
+            $request->only('email')
+        );
+
+        if ($status == Password::RESET_LINK_SENT) {
+            return back()->with('status', __($status));
+        }
+
+        throw ValidationException::withMessages([
+            'email' => [trans($status)],
+        ]);
+    }
+}

app/Http/Controllers/Auth/RegisteredUserController.php

@@ -0,0 +1,52 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Auth\Events\Registered;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rules;
+use Illuminate\Validation\ValidationException;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class RegisteredUserController extends Controller
+{
+    /**
+     * Display the registration view.
+     */
+    public function create(): Response
+    {
+        return Inertia::render('Auth/Register');
+    }
+
+    /**
+     * Handle an incoming registration request.
+     *
+     * @throws ValidationException
+     */
+    public function store(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'name' => 'required|string|max:255',
+            'email' => 'required|string|lowercase|email|max:255|unique:'.User::class,
+            'password' => ['required', 'confirmed', Rules\Password::defaults()],
+        ]);
+
+        $user = User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+        ]);
+
+        event(new Registered($user));
+
+        Auth::login($user);
+
+        return redirect(route('dashboard', absolute: false));
+    }
+}

app/Http/Controllers/Auth/VerifyEmailController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Foundation\Auth\EmailVerificationRequest;
+use Illuminate\Http\RedirectResponse;
+
+class VerifyEmailController extends Controller
+{
+    /**
+     * Mark the authenticated user's email address as verified.
+     */
+    public function __invoke(EmailVerificationRequest $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+        }
+
+        if ($request->user()->markEmailAsVerified()) {
+            event(new Verified($request->user()));
+        }
+
+        return redirect()->intended(route('dashboard', absolute: false).'?verified=1');
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Controllers/HardwareController.php

@@ -0,0 +1,208 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\StoreHardwareRequest;
+use App\Http\Requests\UpdateHardwareRequest;
+use App\Http\Resources\HardwareResource;
+use App\Models\Hardware;
+use App\Models\Order;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Gate;
+use Inertia\Inertia;
+
+class HardwareController extends Controller
+{
+    /**
+     * Affiche la liste des matériels avec recherche et filtrage.
+     */
+    public function index(Request $request)
+    {
+        Gate::authorize('viewAny', Hardware::class);
+
+        $query = Hardware::query()->with('order')->orderBy('created_at', 'desc');
+
+        // Moteur de recherche multicritère
+        if ($request->filled('search')) {
+            $query->search($request->input('search'));
+        }
+
+        // Filtre par statut
+        if ($request->filled('status')) {
+            $query->byStatus($request->input('status'));
+        }
+
+        // Filtre par type/catégorie
+        if ($request->filled('type')) {
+            $query->byType($request->input('type'));
+        }
+
+        // Export CSV si demandé
+        if ($request->has('export')) {
+            $hardwares = $query->get();
+            $headers = [
+                "Content-type" => "text/csv; charset=UTF-8",
+                "Content-Disposition" => "attachment; filename=inventaire_materiels_" . now()->format('Y-m-d_H-i') . ".csv",
+                "Pragma" => "no-cache",
+                "Cache-Control" => "must-revalidate, post-check=0, pre-check=0",
+                "Expires" => "0"
+            ];
+
+            $callback = function () use ($hardwares) {
+                $file = fopen('php://output', 'w');
+                // Ajouter le BOM UTF-8 pour Excel
+                fprintf($file, chr(0xEF).chr(0xBB).chr(0xBF));
+                
+                // En-têtes CSV
+                fputcsv($file, [
+                    'Nom', 'Catégorie', 'Marque', 'Modèle', 'Numéro de série', 
+                    'Statut', 'Emplacement', 'Adresse IP', 'Date d\'achat', 
+                    'Mise en service', 'Fin de garantie', 'Garantie active', 'Commande liée'
+                ], ';');
+
+                foreach ($hardwares as $hw) {
+                    fputcsv($file, [
+                        $hw->name,
+                        match ($hw->type) {
+                            'serveur' => 'Serveur',
+                            'switch' => 'Switch',
+                            'routeur' => 'Routeur',
+                            'onduleur' => 'Onduleur',
+                            'stockage' => 'Stockage (NAS/SAN)',
+                            'pare-feu' => 'Pare-feu',
+                            'poste_travail' => 'Poste de travail',
+                            'autre' => 'Autre',
+                            default => $hw->type
+                        },
+                        $hw->brand,
+                        $hw->model,
+                        $hw->serial_number,
+                        match ($hw->status) {
+                            'en_stock' => 'En stock',
+                            'en_service' => 'En service',
+                            'en_panne' => 'En panne',
+                            'au_rebut' => 'Au rebut',
+                            default => $hw->status
+                        },
+                        $hw->location,
+                        $hw->ip_address,
+                        $hw->purchase_date?->format('d/m/Y'),
+                        $hw->commissioning_date?->format('d/m/Y'),
+                        $hw->warranty_expiration_date?->format('d/m/Y'),
+                        $hw->is_under_warranty ? 'Oui' : 'Non',
+                        $hw->order?->number
+                    ], ';');
+                }
+
+                fclose($file);
+            };
+
+            return response()->stream($callback, 200, $headers);
+        }
+
+        // Pagination classique
+        $hardwares = $query->paginate(10)->withQueryString();
+
+        // Calcul des KPIs
+        $counts = [
+            'total' => Hardware::count(),
+            'en_service' => Hardware::where('status', 'en_service')->count(),
+            'en_stock' => Hardware::where('status', 'en_stock')->count(),
+            'en_panne' => Hardware::where('status', 'en_panne')->count(),
+            'au_rebut' => Hardware::where('status', 'au_rebut')->count(),
+            'under_warranty' => Hardware::get()->filter->is_under_warranty->count(),
+        ];
+
+        return Inertia::render('Materiels/Index', [
+            'hardwares' => HardwareResource::collection($hardwares),
+            'metrics' => $counts,
+            'filters' => $request->only(['search', 'status', 'type']),
+        ]);
+    }
+
+    /**
+     * Formulaire de création d'un matériel.
+     */
+    public function create()
+    {
+        Gate::authorize('create', Hardware::class);
+
+        // Liste des commandes pour pouvoir lier l'équipement (id et numéro de commande)
+        $orders = Order::orderBy('created_at', 'desc')->get(['id', 'number', 'label']);
+
+        return Inertia::render('Materiels/Form', [
+            'isEdit' => false,
+            'orders' => $orders,
+        ]);
+    }
+
+    /**
+     * Enregistre un nouveau matériel en base de données.
+     */
+    public function store(StoreHardwareRequest $request)
+    {
+        Gate::authorize('create', Hardware::class);
+
+        $hardware = Hardware::create($request->validated());
+
+        return redirect()->route('materiels.show', $hardware->id)
+            ->with('success', 'L\'équipement matériel a été enregistré avec succès dans l\'inventaire.');
+    }
+
+    /**
+     * Affiche les détails d'un équipement.
+     */
+    public function show(Hardware $materiel)
+    {
+        Gate::authorize('view', $materiel);
+
+        $materiel->load('order');
+
+        return Inertia::render('Materiels/Show', [
+            'hardware' => new HardwareResource($materiel),
+        ]);
+    }
+
+    /**
+     * Formulaire d'édition d'un équipement.
+     */
+    public function edit(Hardware $materiel)
+    {
+        Gate::authorize('update', $materiel);
+
+        $materiel->load('order');
+        $orders = Order::orderBy('created_at', 'desc')->get(['id', 'number', 'label']);
+
+        return Inertia::render('Materiels/Form', [
+            'hardware' => new HardwareResource($materiel),
+            'isEdit' => true,
+            'orders' => $orders,
+        ]);
+    }
+
+    /**
+     * Met à jour les informations d'un équipement.
+     */
+    public function update(UpdateHardwareRequest $request, Hardware $materiel)
+    {
+        Gate::authorize('update', $materiel);
+
+        $materiel->update($request->validated());
+
+        return redirect()->route('materiels.show', $materiel->id)
+            ->with('success', 'Les informations de l\'équipement ont été mises à jour.');
+    }
+
+    /**
+     * Supprime un équipement de la base de données.
+     */
+    public function destroy(Hardware $materiel)
+    {
+        Gate::authorize('delete', $materiel);
+
+        $materiel->delete();
+
+        return redirect()->route('materiels.index')
+            ->with('success', 'L\'équipement a été retiré définitivement de l\'inventaire.');
+    }
+}

app/Http/Controllers/OrderController.php

@@ -0,0 +1,316 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\StoreOrderRequest;
+use App\Http\Requests\UpdateOrderRequest;
+use App\Http\Resources\OrderResource;
+use App\Models\Order;
+use App\Models\Attachment;
+use App\Models\OrderStatusLog;
+use App\Services\OrderService;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Gate;
+use Illuminate\Support\Facades\Storage;
+use Inertia\Inertia;
+
+class OrderController extends Controller
+{
+    /**
+     * Affiche la liste des commandes avec recherche, filtrage et option d'export CSV.
+     */
+    public function index(Request $request)
+    {
+        Gate::authorize('viewAny', Order::class);
+
+        $query = Order::query()->orderBy('created_at', 'desc');
+
+        // Recherche full-text sur libellé / fournisseur / numéro
+        if ($request->filled('search')) {
+            $search = $request->input('search');
+            $query->where(function ($q) use ($search) {
+                $q->where('number', 'like', "%{$search}%")
+                  ->orWhere('label', 'like', "%{$search}%")
+                  ->orWhere('supplier', 'like', "%{$search}%");
+            });
+        }
+
+        // Filtre par statut
+        if ($request->filled('status')) {
+            $query->byStatus($request->input('status'));
+        }
+
+        // Filtre par demandeur
+        if ($request->filled('requested_by')) {
+            $query->byDemandeur($request->input('requested_by'));
+        }
+
+        // Filtre par type
+        if ($request->filled('type')) {
+            $query->where('type', $request->input('type'));
+        }
+
+        // Filtre par période (date souhaitée de livraison)
+        if ($request->filled('date_start')) {
+            $query->whereDate('delivery_deadline', '>=', $request->input('date_start'));
+        }
+        if ($request->filled('date_end')) {
+            $query->whereDate('delivery_deadline', '<=', $request->input('date_end'));
+        }
+
+        // Export CSV si demandé
+        if ($request->has('export')) {
+            $orders = $query->get();
+            $headers = [
+                "Content-type" => "text/csv; charset=UTF-8",
+                "Content-Disposition" => "attachment; filename=commandes_" . now()->format('Y-m-d_H-i') . ".csv",
+                "Pragma" => "no-cache",
+                "Cache-Control" => "must-revalidate, post-check=0, pre-check=0",
+                "Expires" => "0"
+            ];
+
+            $callback = function () use ($orders) {
+                $file = fopen('php://output', 'w');
+                // Ajouter le BOM UTF-8 pour Excel
+                fprintf($file, chr(0xEF).chr(0xBB).chr(0xBF));
+                
+                // En-têtes CSV en français
+                fputcsv($file, [
+                    'Numéro', 'Libellé / Réf Article', 'Type', 'Fournisseur', 'N° Devis', 
+                    'Montant HT (€)', 'Montant TTC (€)', 'Demandeur', 'Prescripteur',
+                    'Date livraison souhaitée', 'Statut', 'Date création'
+                ], ';');
+
+                foreach ($orders as $order) {
+                    fputcsv($file, [
+                        $order->number,
+                        $order->label,
+                        $order->type,
+                        $order->supplier,
+                        $order->quote_number,
+                        number_format($order->amount_ht, 2, ',', ''),
+                        number_format($order->amount_ttc, 2, ',', ''),
+                        $order->requested_by,
+                        $order->prescriber,
+                        $order->delivery_deadline?->format('d/m/Y'),
+                        match ($order->status) {
+                            'draft' => 'Brouillon',
+                            'validated' => 'Validée',
+                            'ordered' => 'Commandée',
+                            'delivered' => 'Livrée',
+                            'closed' => 'Clôturée',
+                            default => $order->status
+                        },
+                        $order->created_at?->format('d/m/Y H:i')
+                    ], ';');
+                }
+
+                fclose($file);
+            };
+
+            return response()->stream($callback, 200, $headers);
+        }
+
+        // Pagination classique
+        $orders = $query->paginate(10)->withQueryString();
+
+        return Inertia::render('Commandes/Index', [
+            'orders' => OrderResource::collection($orders),
+            'filters' => $request->only(['search', 'status', 'requested_by', 'type', 'date_start', 'date_end']),
+        ]);
+    }
+
+    /**
+     * Formulaire de création.
+     */
+    public function create()
+    {
+        Gate::authorize('create', Order::class);
+
+        return Inertia::render('Commandes/Form', [
+            'isEdit' => false,
+        ]);
+    }
+
+    /**
+     * Enregistre une nouvelle commande en base de données.
+     */
+    public function store(StoreOrderRequest $request, OrderService $orderService)
+    {
+        return DB::transaction(function () use ($request, $orderService) {
+            $validated = $request->validated();
+            
+            // Calcul automatique de la TVA 20% (sauf si exonéré)
+            $excludeVat = (bool) ($validated['exclude_vat'] ?? false);
+            $validated['amount_ttc'] = $excludeVat ? $validated['amount_ht'] : $validated['amount_ht'] * 1.20;
+            
+            // Génération unique et sécurisée du numéro CMD
+            $validated['number'] = $orderService->generateOrderNumber();
+            $validated['status'] = 'draft'; // Statut initial
+
+            $order = Order::create($validated);
+
+            // Gestion de l'historique initial
+            OrderStatusLog::create([
+                'order_id' => $order->id,
+                'user_id' => $request->user()->id,
+                'old_status' => null,
+                'new_status' => 'draft',
+                'changed_at' => now(),
+            ]);
+
+            // Gestion de l'upload des fichiers
+            $fileTypes = [
+                'quote_file' => 'quote',
+                'delivery_note_file' => 'delivery_note',
+                'invoice_file' => 'invoice',
+            ];
+
+            foreach ($fileTypes as $inputName => $type) {
+                if ($request->hasFile($inputName)) {
+                    $file = $request->file($inputName);
+                    // Stockage dans storage/app/public/commandes/{id}/
+                    $path = $file->storeAs("commandes/{$order->id}", $file->getClientOriginalName(), 'public');
+                    
+                    Attachment::create([
+                        'order_id' => $order->id,
+                        'file_path' => $path,
+                        'file_name' => $file->getClientOriginalName(),
+                        'file_type' => $type,
+                    ]);
+                }
+            }
+
+            return redirect()->route('commandes.show', $order->id)
+                ->with('success', 'La demande de commande a été créée avec succès au statut Brouillon.');
+        });
+    }
+
+    /**
+     * Affiche les détails d'une commande.
+     */
+    public function show(Order $order)
+    {
+        Gate::authorize('view', $order);
+
+        $order->load(['attachments', 'statusLogs.user']);
+
+        return Inertia::render('Commandes/Show', [
+            'order' => new OrderResource($order),
+        ]);
+    }
+
+    /**
+     * Formulaire d'édition.
+     */
+    public function edit(Order $order)
+    {
+        Gate::authorize('update', $order);
+
+        $order->load('attachments');
+
+        return Inertia::render('Commandes/Form', [
+            'order' => new OrderResource($order),
+            'isEdit' => true,
+        ]);
+    }
+
+    /**
+     * Met à jour les informations d'une commande.
+     */
+    public function update(UpdateOrderRequest $request, Order $order)
+    {
+        return DB::transaction(function () use ($request, $order) {
+            $validated = $request->validated();
+            
+            // Recalcul de la TVA (sauf si exonéré)
+            $excludeVat = (bool) ($validated['exclude_vat'] ?? false);
+            $validated['amount_ttc'] = $excludeVat ? $validated['amount_ht'] : $validated['amount_ht'] * 1.20;
+
+            $order->update($validated);
+
+            // Gestion de l'upload de nouvelles pièces jointes (ou mise à jour)
+            $fileTypes = [
+                'quote_file' => 'quote',
+                'delivery_note_file' => 'delivery_note',
+                'invoice_file' => 'invoice',
+            ];
+
+            foreach ($fileTypes as $inputName => $type) {
+                if ($request->hasFile($inputName)) {
+                    $file = $request->file($inputName);
+                    
+                    // On supprime l'ancienne pièce jointe de ce type si elle existe
+                    $existingAttachment = $order->attachments()->where('file_type', $type)->first();
+                    if ($existingAttachment) {
+                        Storage::disk('public')->delete($existingAttachment->file_path);
+                        $existingAttachment->delete();
+                    }
+
+                    // Stockage du nouveau fichier
+                    $path = $file->storeAs("commandes/{$order->id}", $file->getClientOriginalName(), 'public');
+                    
+                    Attachment::create([
+                        'order_id' => $order->id,
+                        'file_path' => $path,
+                        'file_name' => $file->getClientOriginalName(),
+                        'file_type' => $type,
+                    ]);
+                }
+            }
+
+            return redirect()->route('commandes.show', $order->id)
+                ->with('success', 'La commande a été mise à jour.');
+        });
+    }
+
+    /**
+     * Supprime une commande de la base de données.
+     */
+    public function destroy(Order $order)
+    {
+        Gate::authorize('delete', $order);
+
+        return DB::transaction(function () use ($order) {
+            // Suppression physique du répertoire contenant les pièces jointes
+            Storage::disk('public')->deleteDirectory("commandes/{$order->id}");
+            
+            $order->delete();
+
+            return redirect()->route('commandes.index')
+                ->with('success', 'La commande et toutes ses pièces jointes ont été supprimées définitivement.');
+        });
+    }
+
+    /**
+     * Gère les changements de statut (transitions).
+     */
+    public function transition(Request $request, Order $order, OrderService $orderService)
+    {
+        $request->validate([
+            'new_status' => ['required', 'string', 'in:validated,ordered,delivered,closed'],
+        ]);
+
+        $newStatus = $request->input('new_status');
+
+        // Autorisation de la transition selon le rôle et le statut cible
+        Gate::authorize('transition', [$order, $newStatus]);
+
+        try {
+            $orderService->transitionStatus($order, $newStatus, $request->user());
+            
+            $statusLabel = match ($newStatus) {
+                'validated' => 'Validée',
+                'ordered' => 'Commandée',
+                'delivered' => 'Livrée',
+                'closed' => 'Clôturée',
+                default => $newStatus
+            };
+
+            return redirect()->back()->with('success', "Le statut de la commande a été mis à jour avec succès : {$statusLabel}.");
+        } catch (\InvalidArgumentException $e) {
+            return redirect()->back()->withErrors(['error' => $e->getMessage()]);
+        }
+    }
+}

app/Http/Controllers/ProfileController.php

@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Http\Requests\ProfileUpdateRequest;
+use Illuminate\Contracts\Auth\MustVerifyEmail;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Redirect;
+use Inertia\Inertia;
+use Inertia\Response;
+
+class ProfileController extends Controller
+{
+    /**
+     * Display the user's profile form.
+     */
+    public function edit(Request $request): Response
+    {
+        return Inertia::render('Profile/Edit', [
+            'mustVerifyEmail' => $request->user() instanceof MustVerifyEmail,
+            'status' => session('status'),
+        ]);
+    }
+
+    /**
+     * Update the user's profile information.
+     */
+    public function update(ProfileUpdateRequest $request): RedirectResponse
+    {
+        $request->user()->fill($request->validated());
+
+        if ($request->user()->isDirty('email')) {
+            $request->user()->email_verified_at = null;
+        }
+
+        $request->user()->save();
+
+        return Redirect::route('profile.edit');
+    }
+
+    /**
+     * Delete the user's account.
+     */
+    public function destroy(Request $request): RedirectResponse
+    {
+        $request->validate([
+            'password' => ['required', 'current_password'],
+        ]);
+
+        $user = $request->user();
+
+        Auth::logout();
+
+        $user->delete();
+
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        return Redirect::to('/');
+    }
+}