rentman-clone/backend/app/api/v1/vehicles.py

"""Vehicle CRUD endpoints including assignments."""

from fastapi import APIRouter, Depends, HTTPException, status, Query
from sqlalchemy import select, func, or_
from sqlalchemy.ext.asyncio import AsyncSession
from sqlalchemy.orm import selectinload

from app.api.deps import get_current_user, require_permission
from app.db.session import get_async_session
from app.models import User, Vehicle, VehicleAssignment
from app.schemas.vehicle import (
    VehicleCreateRequest,
    VehicleUpdateRequest,
    VehicleResponse,
    VehicleListResponse,
    VehicleAssignmentCreateRequest,
    VehicleAssignmentUpdateRequest,
    VehicleAssignmentResponse,
    VehicleAssignmentListResponse,
)

router = APIRouter(prefix="/vehicles", tags=["vehicles"])
assign_router = APIRouter(prefix="/vehicle-assignments", tags=["vehicle-assignments"])


# ===== Vehicle Endpoints =====

@router.get("", response_model=VehicleListResponse)
async def list_vehicles(
    page: int = Query(1, ge=1),
    size: int = Query(20, ge=1, le=100),
    search: str | None = Query(None, description="Search in name, plate, brand"),
    vehicle_type: str | None = Query(None),
    is_active: bool | None = Query(None),
    current_user: User = Depends(require_permission("vehicles:read")),
    session: AsyncSession = Depends(get_async_session),
):
    account_id = current_user.account_id
    base_q = select(Vehicle).where(Vehicle.account_id == account_id)

    if search:
        pattern = f"%{search}%"
        base_q = base_q.where(
            or_(Vehicle.name.ilike(pattern), Vehicle.license_plate.ilike(pattern),
                Vehicle.brand.ilike(pattern), Vehicle.model.ilike(pattern))
        )
    if vehicle_type:
        base_q = base_q.where(Vehicle.vehicle_type == vehicle_type)
    if is_active is not None:
        base_q = base_q.where(Vehicle.is_active == is_active)

    count_q = select(func.count()).select_from(base_q.subquery())
    total = (await session.execute(count_q)).scalar() or 0

    q = base_q.options(selectinload(Vehicle.assignments)).order_by(Vehicle.name).offset((page-1)*size).limit(size)
    result = await session.execute(q)
    items = result.unique().scalars().all()

    return VehicleListResponse(items=[VehicleResponse.model_validate(i) for i in items], total=total, page=page, size=size)


@router.post("", response_model=VehicleResponse, status_code=status.HTTP_201_CREATED)
async def create_vehicle(
    body: VehicleCreateRequest,
    current_user: User = Depends(require_permission("vehicles:write")),
    session: AsyncSession = Depends(get_async_session),
):
    account_id = current_user.account_id
    vehicle = Vehicle(account_id=account_id, **body.model_dump())
    session.add(vehicle)
    await session.commit()
    await session.refresh(vehicle)
    return VehicleResponse.model_validate(vehicle)


@router.get("/{vehicle_id}", response_model=VehicleResponse)
async def get_vehicle(
    vehicle_id: str,
    current_user: User = Depends(require_permission("vehicles:read")),
    session: AsyncSession = Depends(get_async_session),
):
    account_id = current_user.account_id
    result = await session.execute(
        select(Vehicle).options(selectinload(Vehicle.assignments))
        .where(Vehicle.id == vehicle_id, Vehicle.account_id == account_id)
    )
    vehicle = result.unique().scalars().first()
    if not vehicle:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Vehicle not found")
    return VehicleResponse.model_validate(vehicle)


@router.put("/{vehicle_id}", response_model=VehicleResponse)
async def update_vehicle(
    vehicle_id: str,
    body: VehicleUpdateRequest,
    current_user: User = Depends(require_permission("vehicles:write")),
    session: AsyncSession = Depends(get_async_session),
):
    account_id = current_user.account_id
    result = await session.execute(
        select(Vehicle).options(selectinload(Vehicle.assignments))
        .where(Vehicle.id == vehicle_id, Vehicle.account_id == account_id)
    )
    vehicle = result.unique().scalars().first()
    if not vehicle:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Vehicle not found")
    update_data = body.model_dump(exclude_unset=True)
    for field, value in update_data.items():
        setattr(vehicle, field, value)
    await session.commit()
    await session.refresh(vehicle)
    return VehicleResponse.model_validate(vehicle)


@router.delete("/{vehicle_id}", status_code=status.HTTP_204_NO_CONTENT)
async def delete_vehicle(
    vehicle_id: str,
    current_user: User = Depends(require_permission("vehicles:delete")),
    session: AsyncSession = Depends(get_async_session),
):
    account_id = current_user.account_id
    result = await session.execute(select(Vehicle).where(Vehicle.id == vehicle_id, Vehicle.account_id == account_id))
    vehicle = result.scalars().first()
    if not vehicle:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Vehicle not found")
    await session.delete(vehicle)
    await session.commit()
    return None


# ===== VehicleAssignment Endpoints =====

@assign_router.get("", response_model=VehicleAssignmentListResponse)
async def list_assignments(
    page: int = Query(1, ge=1),
    size: int = Query(50, ge=1, le=200),
    vehicle_id: str | None = Query(None),
    status: str | None = Query(None),
    current_user: User = Depends(require_permission("vehicles:read")),
    session: AsyncSession = Depends(get_async_session),
):
    account_id = current_user.account_id
    base_q = select(VehicleAssignment).join(Vehicle).where(Vehicle.account_id == account_id)
    if vehicle_id:
        base_q = base_q.where(VehicleAssignment.vehicle_id == vehicle_id)
    if status:
        base_q = base_q.where(VehicleAssignment.status == status)
    count_q = select(func.count()).select_from(base_q.subquery())
    total = (await session.execute(count_q)).scalar() or 0
    q = base_q.order_by(VehicleAssignment.start_date.desc()).offset((page-1)*size).limit(size)
    result = await session.execute(q)
    items = result.scalars().all()
    return VehicleAssignmentListResponse(items=[VehicleAssignmentResponse.model_validate(i) for i in items], total=total, page=page, size=size)


@assign_router.post("", response_model=VehicleAssignmentResponse, status_code=status.HTTP_201_CREATED)
async def create_assignment(
    body: VehicleAssignmentCreateRequest,
    current_user: User = Depends(require_permission("vehicles:write")),
    session: AsyncSession = Depends(get_async_session),
):
    v_result = await session.execute(select(Vehicle).where(Vehicle.id == body.vehicle_id, Vehicle.account_id == current_user.account_id))
    if not v_result.scalars().first():
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Vehicle not found")
    assign = VehicleAssignment(**body.model_dump())
    session.add(assign)
    await session.commit()
    await session.refresh(assign)
    return VehicleAssignmentResponse.model_validate(assign)


@assign_router.put("/{assign_id}", response_model=VehicleAssignmentResponse)
async def update_assignment(
    assign_id: str,
    body: VehicleAssignmentUpdateRequest,
    current_user: User = Depends(require_permission("vehicles:write")),
    session: AsyncSession = Depends(get_async_session),
):
    result = await session.execute(
        select(VehicleAssignment).join(Vehicle).where(VehicleAssignment.id == assign_id, Vehicle.account_id == current_user.account_id)
    )
    assign = result.scalars().first()
    if not assign:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Assignment not found")
    update_data = body.model_dump(exclude_unset=True)
    for field, value in update_data.items():
        setattr(assign, field, value)
    await session.commit()
    await session.refresh(assign)
    return VehicleAssignmentResponse.model_validate(assign)


@assign_router.delete("/{assign_id}", status_code=status.HTTP_204_NO_CONTENT)
async def delete_assignment(
    assign_id: str,
    current_user: User = Depends(require_permission("vehicles:delete")),
    session: AsyncSession = Depends(get_async_session),
):
    result = await session.execute(
        select(VehicleAssignment).join(Vehicle).where(VehicleAssignment.id == assign_id, Vehicle.account_id == current_user.account_id)
    )
    assign = result.scalars().first()
    if not assign:
        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Assignment not found")
    await session.delete(assign)
    await session.commit()
    return None