Complete CarPass product flows

app/api/cars.py

@@ -4,9 +4,10 @@ from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.api.deps import get_current_telegram_user
 from app.db.session import get_session
-from app.models.car import Car
+from app.models.car import Car, VehicleAccess
 from app.models.user import User
 from app.schemas.car import CarCreate, CarRead, CarUpdate
+from app.services.odometer import add_odometer_history, validate_odometer_change
 from app.services.vehicle_identity import normalize_license_plate, validate_vin
 
 router = APIRouter(prefix="/cars", tags=["cars"])
@@ -30,6 +31,17 @@ async def create_car(
     data = apply_identity_fields(payload.model_dump(exclude={"owner_id"}))
     car = Car(**data, owner_id=current_user.id)
     session.add(car)
+    await session.flush()
+    session.add(VehicleAccess(vehicle_id=car.id, user_id=current_user.id, role="owner", status="active"))
+    if car.current_odometer is not None:
+        add_odometer_history(
+            session,
+            car,
+            new_odometer=car.current_odometer,
+            source_record_type="manual",
+            source_record_id=None,
+            changed_by=current_user.id,
+        )
     await session.commit()
     await session.refresh(car)
     return car
@@ -75,8 +87,23 @@ async def update_car(
         raise HTTPException(status_code=404, detail="Car not found")
     if car.owner_id != current_user.id:
         raise HTTPException(status_code=403, detail="Forbidden")
-    for field, value in apply_identity_fields(payload.model_dump(exclude_unset=True)).items():
+    raw = apply_identity_fields(payload.model_dump(exclude_unset=True))
+    odometer_value = raw.pop("current_odometer", None) if "current_odometer" in raw else None
+    if odometer_value is not None:
+        validate_odometer_change(car, odometer_value, source_record_type="manual", confirm_lower_odometer=True)
+    for field, value in raw.items():
         setattr(car, field, value)
+    if odometer_value is not None and odometer_value != car.current_odometer:
+        add_odometer_history(
+            session,
+            car,
+            new_odometer=odometer_value,
+            source_record_type="manual",
+            source_record_id=None,
+            changed_by=current_user.id,
+            confirmation_required=car.current_odometer is not None and odometer_value < car.current_odometer,
+            user_confirmed=True,
+        )
     await session.commit()
     await session.refresh(car)
     return car