soft/backend/src/HealthManager.WebApi/Controllers/HealthController.cs

using System.Security.Claims;
using System.Text.Json;
using HealthManager.Application.Services;
using Microsoft.AspNetCore.Authorization;
using Microsoft.AspNetCore.Mvc;

namespace HealthManager.WebApi.Controllers;

[ApiController]
[Route("api/health-records")]
[Authorize]
public class HealthController(HealthService healthService) : ControllerBase
{
    private Guid UserId => Guid.Parse(User.FindFirstValue(ClaimTypes.NameIdentifier)!);
    private string Role => User.FindFirstValue(ClaimTypes.Role)!;

    [HttpGet]
    public async Task<IActionResult> GetRecords([FromQuery] string? type, [FromQuery] int days = 30)
    {
        var targetUserId = UserId;

        // Doctors can query any patient
        if (Role == "doctor" && Request.Query.ContainsKey("patientId"))
            targetUserId = Guid.Parse(Request.Query["patientId"]!);

        var records = await healthService.GetRecordsAsync(targetUserId, type, days);
        return Ok(records.Select(r => new
        {
            r.Id, r.Type, Value = r.Value.RootElement.GetRawText(), r.Unit,
            r.RecordedAt, r.Source, r.Notes, r.CreatedAt,
        }));
    }

    [HttpGet("stats")]
    public async Task<IActionResult> GetStats()
    {
        var stats = await healthService.GetStatsAsync(UserId);
        return Ok(stats);
    }

    [HttpGet("latest/{type}")]
    public async Task<IActionResult> GetLatest(string type)
    {
        var record = await healthService.GetLatestAsync(UserId, type);
        if (record == null) return Ok((object?)null);
        return Ok(new { record.Id, record.Type, Value = record.Value.RootElement.GetRawText(), record.Unit, record.RecordedAt, record.Source });
    }

    [HttpPost]
    public async Task<IActionResult> AddRecord([FromBody] HealthRecordCreateRequest request)
    {
        // Validate JSON
        try { JsonDocument.Parse(request.ValueJson); }
        catch (JsonException) { return BadRequest(new { message = "无效的数据格式" }); }

        var record = await healthService.AddRecordAsync(UserId, request.Type, request.ValueJson, request.Unit, request.RecordedAt, request.Notes);
        return Ok(new { record.Id, record.Type, Value = record.Value.RootElement.GetRawText(), record.Unit, record.RecordedAt, record.Source });
    }

    [HttpDelete("{id:guid}")]
    public async Task<IActionResult> DeleteRecord(Guid id)
    {
        var ok = await healthService.DeleteAsync(id, UserId);
        if (!ok) return NotFound(new { message = "记录不存在" });
        return Ok(new { message = "删除成功" });
    }
}

public record HealthRecordCreateRequest(string Type, string ValueJson, string Unit, DateTime RecordedAt, string? Notes);