feat random bullshit GO!

LctMonolith/Controllers/StoreController.cs

@@ -0,0 +1,42 @@
+using System.Security.Claims;
+using LctMonolith.Services;
+using LctMonolith.Services.Models;
+using Microsoft.AspNetCore.Authorization;
+using Microsoft.AspNetCore.Mvc;
+
+namespace LctMonolith.Controllers;
+
+/// <summary>
+/// Store endpoints for listing items and purchasing.
+/// </summary>
+[ApiController]
+[Route("api/store")]
+[Authorize]
+public class StoreController : ControllerBase
+{
+    private readonly IStoreService _storeService;
+
+    public StoreController(IStoreService storeService)
+    {
+        _storeService = storeService;
+    }
+
+    private Guid GetUserId() => Guid.Parse(User.FindFirstValue(ClaimTypes.NameIdentifier)!);
+
+    /// <summary>List active store items.</summary>
+    [HttpGet("items")]
+    public async Task<IActionResult> GetItems(CancellationToken ct)
+    {
+        var items = await _storeService.GetActiveItemsAsync(ct);
+        return Ok(items);
+    }
+
+    /// <summary>Purchase an item for the authenticated user.</summary>
+    [HttpPost("purchase")]
+    public async Task<IActionResult> Purchase(PurchaseRequest req, CancellationToken ct)
+    {
+        var inv = await _storeService.PurchaseAsync(GetUserId(), req.ItemId, req.Quantity, ct);
+        return Ok(new { inv.StoreItemId, inv.Quantity, inv.AcquiredAt });
+    }
+}
+