/api/location:
  get:
    tags: [Master Data]
    summary: List locations
    security:
      - bearerAuth: []
    parameters:
      - name: LocCode
        in: query
        schema:
          type: string
        description: Filter by location code
      - name: LocName
        in: query
        schema:
          type: string
        description: Filter by location name (searches in LocFull)
    responses:
      '200':
        description: List of locations
        content:
          application/json:
            schema:
              type: object
              properties:
                status:
                  type: string
                message:
                  type: string
                data:
                  type: array
                  items:
                    $ref: '../components/schemas/master-data.yaml#/Location'

  post:
    tags: [Master Data]
    summary: Create location
    security:
      - bearerAuth: []
    requestBody:
      required: true
      content:
        application/json:
          schema:
            type: object
            required:
              - LocCode
              - LocFull
            properties:
              SiteID:
                type: integer
              LocCode:
                type: string
                maxLength: 6
              Parent:
                type: integer
              LocFull:
                type: string
                maxLength: 255