feat: backend for deposit wallet, fee deduction, and super admin manual adjust testing

controllers/order_controller.go

@@ -349,6 +349,20 @@ func PayCash(c *gin.Context) {
 		return
 	}
 
+	var company models.Company
+	if err := tx.First(&company, *user.CompanyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusNotFound, gin.H{"detail": "Company tidak ditemukan"})
+		return
+	}
+
+	// 1. Cek Limit Dompet Mengendap
+	if company.WalletBalance <= company.WalletLimit {
+		tx.Rollback()
+		c.JSON(http.StatusPaymentRequired, gin.H{"detail": "Saldo limit dompet minus. Hubungi Owner untuk melakukan Top-up saldo sistem terlebih dahulu agar bisa menerima pembayaran tunai."})
+		return
+	}
+
 	if order.PaymentStatus == "paid" {
 		tx.Rollback()
 		c.JSON(http.StatusBadRequest, gin.H{"detail": "Order sudah dibayar"})
@@ -380,27 +394,47 @@ func PayCash(c *gin.Context) {
 	}
 
 	// Hitung fee platform berdasarkan Company
-	var company models.Company
-	if err := tx.First(&company, *user.CompanyID).Error; err == nil {
-		fee := 0
-		if company.CashFeeRules != "" && company.CashFeeRules != "[]" {
-			var rules []map[string]interface{}
-			if err := json.Unmarshal([]byte(company.CashFeeRules), &rules); err == nil {
-				for _, r := range rules {
-					minAmt := int(r["min_amount"].(float64))
-					maxAmt := int(r["max_amount"].(float64))
-					if order.TotalAmount >= minAmt && order.TotalAmount <= maxAmt {
-						fee = int(r["fee"].(float64))
-						break
-					}
+	fee := 0
+	if company.CashFeeRules != "" && company.CashFeeRules != "[]" {
+		var rules []map[string]interface{}
+		if err := json.Unmarshal([]byte(company.CashFeeRules), &rules); err == nil {
+			for _, r := range rules {
+				minAmt := int(r["min_amount"].(float64))
+				maxAmt := int(r["max_amount"].(float64))
+				if order.TotalAmount >= minAmt && order.TotalAmount <= maxAmt {
+					fee = int(r["fee"].(float64))
+					break
 				}
 			}
 		}
-		// Fallback ke fee lama jika tidak ada rule yang cocok/diset
-		if fee == 0 && company.FeePercentage > 0 {
-			fee = int(float64(order.TotalAmount) * company.FeePercentage / 100)
+	}
+	// Fallback ke fee lama jika tidak ada rule yang cocok/diset
+	if fee == 0 && company.FeePercentage > 0 {
+		fee = int(float64(order.TotalAmount) * company.FeePercentage / 100)
+	}
+	order.PlatformFee = fee
+
+	// 2. Potong saldo dompet jika ada fee
+	if fee > 0 {
+		company.WalletBalance -= float64(fee)
+		if err := tx.Save(&company).Error; err != nil {
+			tx.Rollback()
+			c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal memotong saldo dompet"})
+			return
+		}
+
+		walletTx := models.WalletTransaction{
+			CompanyID: company.ID,
+			Amount:    -float64(fee),
+			Type:      "cash_fee",
+			RefID:     order.OrderNumber,
+			Desc:      "Potongan fee transaksi tunai",
+		}
+		if err := tx.Create(&walletTx).Error; err != nil {
+			tx.Rollback()
+			c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mencatat mutasi dompet"})
+			return
 		}
-		order.PlatformFee = fee
 	}
 
 	if err := tx.Save(&order).Error; err != nil {

controllers/wallet_controller.go

@@ -0,0 +1,229 @@
+package controllers
+
+import (
+	"fmt"
+	"net/http"
+	"service-warungpos-go/config"
+	"service-warungpos-go/models"
+
+	"github.com/gin-gonic/gin"
+)
+
+// ==================== MERCHANT ENDPOINTS ====================
+
+// GetWalletDetail mengembalikan saldo dompet dan riwayat mutasi perusahaan
+func GetWalletDetail(c *gin.Context) {
+	userVal, _ := c.Get("user")
+	user := userVal.(*models.User)
+
+	var company models.Company
+	if err := config.DB.First(&company, *user.CompanyID).Error; err != nil {
+		c.JSON(http.StatusNotFound, gin.H{"detail": "Company tidak ditemukan"})
+		return
+	}
+
+	var history []models.WalletTransaction
+	if err := config.DB.Where("company_id = ?", company.ID).Order("created_at desc").Limit(50).Find(&history).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mengambil riwayat dompet"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{
+		"balance": company.WalletBalance,
+		"limit":   company.WalletLimit,
+		"history": history,
+	})
+}
+
+type TopupManualRequest struct {
+	Amount   float64 `json:"amount" binding:"required,gt=0"`
+	ProofURL string  `json:"proof_url" binding:"required"`
+}
+
+// RequestTopupManual mengajukan penambahan saldo (menunggu persetujuan admin)
+func RequestTopupManual(c *gin.Context) {
+	userVal, _ := c.Get("user")
+	user := userVal.(*models.User)
+
+	var req TopupManualRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"detail": err.Error()})
+		return
+	}
+
+	topup := models.TopupRequest{
+		CompanyID: *user.CompanyID,
+		Amount:    req.Amount,
+		ProofURL:  req.ProofURL,
+		Status:    "pending",
+	}
+
+	if err := config.DB.Create(&topup).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mengajukan top-up"})
+		return
+	}
+
+	c.JSON(http.StatusCreated, gin.H{"message": "Pengajuan top-up berhasil dibuat, menunggu persetujuan admin", "data": topup})
+}
+
+// ==================== SUPER ADMIN ENDPOINTS ====================
+
+// AdminGetPendingTopups melihat semua pengajuan topup yang menunggu
+func AdminGetPendingTopups(c *gin.Context) {
+	var topups []models.TopupRequest
+	if err := config.DB.Preload("Company").Where("status = ?", "pending").Order("created_at asc").Find(&topups).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mengambil data top-up"})
+		return
+	}
+	c.JSON(http.StatusOK, topups)
+}
+
+// AdminApproveTopup menyetujui pengajuan topup dan menambah saldo dompet
+func AdminApproveTopup(c *gin.Context) {
+	topupID := c.Param("id")
+
+	tx := config.DB.Begin()
+	defer func() {
+		if r := recover(); r != nil {
+			tx.Rollback()
+		}
+	}()
+
+	var topup models.TopupRequest
+	if err := tx.First(&topup, topupID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusNotFound, gin.H{"detail": "Request Top-up tidak ditemukan"})
+		return
+	}
+
+	if topup.Status != "pending" {
+		tx.Rollback()
+		c.JSON(http.StatusBadRequest, gin.H{"detail": "Status top-up sudah diproses sebelumnya"})
+		return
+	}
+
+	topup.Status = "approved"
+	if err := tx.Save(&topup).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal update status topup"})
+		return
+	}
+
+	// Tambahkan saldo ke perusahaan
+	var company models.Company
+	if err := tx.First(&company, topup.CompanyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusNotFound, gin.H{"detail": "Company tidak ditemukan"})
+		return
+	}
+
+	company.WalletBalance += topup.Amount
+	if err := tx.Save(&company).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal update saldo perusahaan"})
+		return
+	}
+
+	// Catat di log transaksi dompet
+	walletTx := models.WalletTransaction{
+		CompanyID: company.ID,
+		Amount:    topup.Amount,
+		Type:      "topup_manual",
+		RefID:     fmt.Sprintf("TOPUP-%d", topup.ID),
+		Desc:      "Top-up Saldo Manual (Disetujui Admin)",
+	}
+	if err := tx.Create(&walletTx).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mencatat log dompet"})
+		return
+	}
+
+	if err := tx.Commit().Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menyimpan perubahan"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"message": "Top-up berhasil disetujui", "new_balance": company.WalletBalance})
+}
+
+// AdminRejectTopup menolak pengajuan topup
+func AdminRejectTopup(c *gin.Context) {
+	topupID := c.Param("id")
+
+	var topup models.TopupRequest
+	if err := config.DB.First(&topup, topupID).Error; err != nil {
+		c.JSON(http.StatusNotFound, gin.H{"detail": "Request Top-up tidak ditemukan"})
+		return
+	}
+
+	if topup.Status != "pending" {
+		c.JSON(http.StatusBadRequest, gin.H{"detail": "Status top-up sudah diproses sebelumnya"})
+		return
+	}
+
+	topup.Status = "rejected"
+	if err := config.DB.Save(&topup).Error; err != nil {
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menolak topup"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"message": "Top-up berhasil ditolak"})
+}
+
+type AdminAdjustWalletRequest struct {
+	Amount float64 `json:"amount" binding:"required"`
+}
+
+// AdminAdjustWallet (Untuk keperluan testing) menyesuaikan saldo tanpa topup
+func AdminAdjustWallet(c *gin.Context) {
+	companyID := c.Param("id")
+
+	var req AdminAdjustWalletRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(http.StatusBadRequest, gin.H{"detail": err.Error()})
+		return
+	}
+
+	tx := config.DB.Begin()
+	defer func() {
+		if r := recover(); r != nil {
+			tx.Rollback()
+		}
+	}()
+
+	var company models.Company
+	if err := tx.First(&company, companyID).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusNotFound, gin.H{"detail": "Company tidak ditemukan"})
+		return
+	}
+
+	company.WalletBalance += req.Amount
+	if err := tx.Save(&company).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal update saldo perusahaan"})
+		return
+	}
+
+	walletTx := models.WalletTransaction{
+		CompanyID: company.ID,
+		Amount:    req.Amount,
+		Type:      "admin_adjustment",
+		RefID:     "ADMIN",
+		Desc:      "Penyesuaian saldo manual oleh admin",
+	}
+	if err := tx.Create(&walletTx).Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal mencatat log dompet"})
+		return
+	}
+
+	if err := tx.Commit().Error; err != nil {
+		tx.Rollback()
+		c.JSON(http.StatusInternalServerError, gin.H{"detail": "Gagal menyimpan perubahan"})
+		return
+	}
+
+	c.JSON(http.StatusOK, gin.H{"message": "Saldo berhasil disesuaikan", "new_balance": company.WalletBalance})
+}

main.go

@@ -37,6 +37,8 @@ func main() {
 		&models.Setting{},
 		&models.Member{},
 		&models.PointRule{},
+		&models.WalletTransaction{},
+		&models.TopupRequest{},
 	)
 	if err != nil {
 		log.Fatalf("Gagal melakukan Auto-Migration: %v", err)
@@ -234,6 +236,35 @@ func main() {
 				fees.PUT("/companies/:company_id/set-fee", controllers.SetCompanyFee)
 			}
 		}
+
+		// === WALLET ROUTES ===
+		wallet := api.Group("/wallet")
+		{
+			wallet.Use(middleware.GetCurrentUser(), middleware.RequireTenantContext())
+			{
+				wallet.GET("/", controllers.GetWalletDetail)
+				wallet.POST("/topup/manual", controllers.RequestTopupManual)
+			}
+		}
+
+		// === ADMIN TOPUP & WALLET ROUTES ===
+		adminTopups := api.Group("/admin/topups")
+		{
+			adminTopups.Use(middleware.GetCurrentUser(), middleware.RequireSuperAdmin())
+			{
+				adminTopups.GET("/", controllers.AdminGetPendingTopups)
+				adminTopups.POST("/:id/approve", controllers.AdminApproveTopup)
+				adminTopups.POST("/:id/reject", controllers.AdminRejectTopup)
+			}
+		}
+
+		adminCompanies := api.Group("/admin/companies")
+		{
+			adminCompanies.Use(middleware.GetCurrentUser(), middleware.RequireSuperAdmin())
+			{
+				adminCompanies.POST("/:id/adjust-wallet", controllers.AdminAdjustWallet)
+			}
+		}
 	}
 
 	// 7. Mulai Server (Membaca dinamis port Hugging Face Spaces jika ada)

models/models.go

@@ -26,6 +26,8 @@ type Company struct {
 	QrisFeeMin         int            `gorm:"default:850" json:"qris_fee_min"`
 	QrisMinTransaction int            `gorm:"default:10000" json:"qris_min_transaction"`
 	AllowQrisBelowMin  bool           `gorm:"default:false" json:"allow_qris_below_min"`
+	WalletBalance      float64        `gorm:"type:float;default:0.0" json:"wallet_balance"`
+	WalletLimit        float64        `gorm:"type:float;default:-50000.0" json:"wallet_limit"`
 	PointRules         []PointRule    `gorm:"foreignKey:CompanyID;constraint:OnDelete:CASCADE" json:"point_rules"`
 	CreatedAt         time.Time      `gorm:"autoCreateTime" json:"created_at"`
 	Branches          []Branch       `gorm:"foreignKey:CompanyID;constraint:OnDelete:CASCADE" json:"-"`
@@ -175,3 +177,25 @@ type Setting struct {
 	TripayPaymentMethod string    `gorm:"type:varchar(50);default:'QRIS'" json:"tripay_payment_method"`
 	UpdatedAt          time.Time `gorm:"autoUpdateTime" json:"updated_at"`
 }
+
+type WalletTransaction struct {
+	ID        uint      `gorm:"primaryKey" json:"id"`
+	CompanyID uint      `gorm:"not null;index" json:"company_id"`
+	Amount    float64   `gorm:"not null" json:"amount"`
+	Type      string    `gorm:"type:varchar(50);not null" json:"type"` // "cash_fee", "topup_qris", "topup_manual", "admin_adjustment"
+	RefID     string    `gorm:"type:varchar(100)" json:"ref_id"`
+	Desc      string    `gorm:"type:varchar(255)" json:"desc"`
+	CreatedAt time.Time `gorm:"autoCreateTime" json:"created_at"`
+	Company   *Company  `gorm:"foreignKey:CompanyID" json:"company,omitempty"`
+}
+
+type TopupRequest struct {
+	ID        uint      `gorm:"primaryKey" json:"id"`
+	CompanyID uint      `gorm:"not null;index" json:"company_id"`
+	Amount    float64   `gorm:"not null" json:"amount"`
+	ProofURL  string    `gorm:"type:varchar(255);not null" json:"proof_url"`
+	Status    string    `gorm:"type:varchar(20);default:'pending'" json:"status"` // pending, approved, rejected
+	CreatedAt time.Time `gorm:"autoCreateTime" json:"created_at"`
+	UpdatedAt time.Time `gorm:"autoUpdateTime" json:"updated_at"`
+	Company   *Company  `gorm:"foreignKey:CompanyID" json:"company,omitempty"`
+}