Add public API with API key middleware and webhooks

app/Http/Controllers/Api/AssetApiController.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Models\Asset;
+use Illuminate\Http\Request;
+
+class AssetApiController extends Controller
+{
+    public function index(Request $request)
+    {
+        $perPage = min($request->integer('per_page', 25), 100);
+
+        $assets = Asset::query()
+            ->with(['status', 'class', 'category', 'assetLocation', 'department', 'personInCharge'])
+            ->when($request->filled('status'), fn ($q) => $q->whereHas('status', fn ($qq) => $qq->where('code', $request->string('status'))))
+            ->when($request->filled('location_id'), fn ($q) => $q->where('asset_location_id', $request->string('location_id')))
+            ->when($request->filled('department_id'), fn ($q) => $q->where('department_id', $request->string('department_id')))
+            ->when($request->filled('search'), fn ($q) => $q->where(function ($qq) use ($request) {
+                $s = $request->string('search');
+                $qq->where('code', 'like', "%{$s}%")->orWhere('name', 'like', "%{$s}%");
+            }))
+            ->paginate($perPage);
+
+        return response()->json($assets);
+    }
+
+    public function show(Asset $asset)
+    {
+        return response()->json(
+            $asset->load([
+                'status', 'class', 'category', 'assetLocation', 'department',
+                'personInCharge', 'assetUser', 'warranty', 'photos',
+            ])
+        );
+    }
+}

app/Http/Controllers/Api/AssetTransactionApiController.php

@@ -0,0 +1,57 @@
+<?php
+
+namespace App\Http\Controllers\Api;
+
+use App\Http\Controllers\Controller;
+use App\Models\Asset;
+use App\Services\Asset\AssetService;
+use Illuminate\Http\Request;
+
+class AssetTransactionApiController extends Controller
+{
+    public function __construct(private readonly AssetService $assets)
+    {
+    }
+
+    public function storeMovement(Request $request, Asset $asset)
+    {
+        $data = $request->validate([
+            'to_location_id' => ['nullable', 'uuid', 'exists:asset_locations,id'],
+            'to_department_id' => ['nullable', 'uuid', 'exists:departments,id'],
+            'to_asset_user_id' => ['nullable', 'uuid', 'exists:asset_users,id'],
+            'notes' => ['nullable', 'string'],
+            'performed_at' => ['nullable', 'date'],
+        ]);
+
+        $movement = $this->assets->move($asset, $data);
+
+        return response()->json(['message' => 'Movement recorded', 'data' => $movement], 201);
+    }
+
+    public function storeDisposal(Request $request, Asset $asset)
+    {
+        $data = $request->validate([
+            'reason' => ['required', 'string', 'max:255'],
+            'notes' => ['nullable', 'string'],
+            'disposed_at' => ['nullable', 'date'],
+        ]);
+
+        $disposal = $this->assets->dispose($asset, $data);
+
+        return response()->json(['message' => 'Disposal recorded', 'data' => $disposal], 201);
+    }
+
+    public function storeAudit(Request $request, Asset $asset)
+    {
+        $data = $request->validate([
+            'status' => ['required', 'string', 'in:matched,missing,damaged'],
+            'notes' => ['nullable', 'string'],
+            'location_id' => ['nullable', 'uuid', 'exists:asset_locations,id'],
+            'audited_at' => ['nullable', 'date'],
+        ]);
+
+        $audit = $this->assets->audit($asset, $data);
+
+        return response()->json(['message' => 'Audit recorded', 'data' => $audit], 201);
+    }
+}