from typing import Any, Dict from core.database import get_core_db from core.security import get_current_user, has_role from fastapi import APIRouter, Depends, HTTPException, Query from sqlalchemy.orm import Session from .dto import CountryDTO from .models import Country from ..rbac import require_ref_view router = APIRouter(prefix="/countries") @router.get( "/", response_model=Dict[str, Any], dependencies=[Depends(require_ref_view("ref_countries.view"))], ) async def list_countries( page: int = Query(1, ge=1, description="Número de página"), page_size: int = Query(50, ge=1, le=100, description="Tamaño de página"), search: str = Query(None, description="Término de búsqueda"), db: Session = Depends(get_core_db), ): """Lista de países protegida por permiso ref_countries.view""" skip = (page - 1) * page_size query = db.query(Country) if search: search_filter = f"%{search}%" query = query.filter( (Country.m3_key.ilike(search_filter)) | (Country.mex_key.ilike(search_filter)) | (Country.ame_key.ilike(search_filter)) | (Country.description_es.ilike(search_filter)) | (Country.description_en.ilike(search_filter)) ) total = query.count() items = query.offset(skip).limit(page_size).all() return { "items": [CountryDTO.model_validate(obj) for obj in items], "total": total, "page": page, "page_size": page_size, } @router.get( "/{m3_key}", response_model=CountryDTO, dependencies=[Depends(require_ref_view("ref_countries.view"))], ) async def get_country( m3_key: str, db: Session = Depends(get_core_db), current_user: dict = Depends(get_current_user), ): obj = db.query(Country).filter(Country.m3_key == m3_key).first() if not obj: raise HTTPException(status_code=404, detail="Not found") return obj @router.post("/", response_model=CountryDTO, status_code=201) async def create_country( data: CountryDTO, db: Session = Depends(get_core_db), current_user: dict = Depends(has_role("admin")), ): obj = Country(**data.dict()) db.add(obj) db.commit() db.refresh(obj) return obj @router.put("/{m3_key}", response_model=CountryDTO) async def update_country( m3_key: str, data: CountryDTO, db: Session = Depends(get_core_db), current_user: dict = Depends(has_role("admin")), ): obj = db.query(Country).filter(Country.m3_key == m3_key).first() if not obj: raise HTTPException(status_code=404, detail="Not found") for field, value in data.dict().items(): setattr(obj, field, value) db.commit() db.refresh(obj) return obj @router.delete("/{m3_key}", status_code=204) async def delete_country( m3_key: str, db: Session = Depends(get_core_db), current_user: dict = Depends(has_role("admin")), ): obj = db.query(Country).filter(Country.m3_key == m3_key).first() if not obj: raise HTTPException(status_code=404, detail="Not found") db.delete(obj) db.commit() return None