Add service platform foundation

app/api/change_requests.py

@@ -0,0 +1,67 @@
+from datetime import UTC, datetime
+
+from fastapi import APIRouter, Depends, HTTPException
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.api.deps import get_current_telegram_user, log_audit
+from app.api.service_visits import apply_vehicle_change
+from app.db.session import get_session
+from app.models.car import Car, VehicleDataChangeRequest
+from app.models.user import User
+from app.schemas.service_center import VehicleDataChangeRequestRead
+
+router = APIRouter(prefix="/vehicle-change-requests", tags=["vehicle-change-requests"])
+
+
+@router.post("/{request_id}/approve", response_model=VehicleDataChangeRequestRead)
+async def approve_vehicle_change_request(
+    request_id: int,
+    session: AsyncSession = Depends(get_session),
+    current_user: User = Depends(get_current_telegram_user),
+) -> VehicleDataChangeRequest:
+    request = await session.get(VehicleDataChangeRequest, request_id)
+    if request is None:
+        raise HTTPException(status_code=404, detail="Change request not found")
+    if request.owner_user_id != current_user.id:
+        raise HTTPException(status_code=403, detail="Forbidden")
+    vehicle = await session.get(Car, request.vehicle_id)
+    if vehicle is None:
+        raise HTTPException(status_code=404, detail="Vehicle not found")
+    apply_vehicle_change(vehicle, request.field_name, request.new_value)
+    request.status = "approved"
+    request.resolved_at = datetime.now(UTC)
+    await log_audit(
+        session,
+        actor=current_user,
+        action="vehicle_change_request.approve",
+        target_type="vehicle_change_request",
+        target_id=request_id,
+    )
+    await session.commit()
+    await session.refresh(request)
+    return request
+
+
+@router.post("/{request_id}/reject", response_model=VehicleDataChangeRequestRead)
+async def reject_vehicle_change_request(
+    request_id: int,
+    session: AsyncSession = Depends(get_session),
+    current_user: User = Depends(get_current_telegram_user),
+) -> VehicleDataChangeRequest:
+    request = await session.get(VehicleDataChangeRequest, request_id)
+    if request is None:
+        raise HTTPException(status_code=404, detail="Change request not found")
+    if request.owner_user_id != current_user.id:
+        raise HTTPException(status_code=403, detail="Forbidden")
+    request.status = "rejected"
+    request.resolved_at = datetime.now(UTC)
+    await log_audit(
+        session,
+        actor=current_user,
+        action="vehicle_change_request.reject",
+        target_type="vehicle_change_request",
+        target_id=request_id,
+    )
+    await session.commit()
+    await session.refresh(request)
+    return request