import uuid from fastapi import APIRouter, Depends, HTTPException, status from sqlalchemy.ext.asyncio import AsyncSession from app.core.deps import get_current_user, get_db_session, require_study_member, require_study_roles from app.crud import audit as audit_crud from app.crud import drug_shipment as shipment_crud from app.crud import study as study_crud from app.schemas.drug_shipment import DrugShipmentCreate, DrugShipmentRead, DrugShipmentUpdate router = APIRouter() async def _ensure_study_exists(db: AsyncSession, study_id: uuid.UUID): study = await study_crud.get(db, study_id) if not study: raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Study not found") return study @router.post( "/shipments", response_model=DrugShipmentRead, status_code=status.HTTP_201_CREATED, dependencies=[Depends(require_study_roles(["PM", "CRA"]))], ) async def create_shipment( study_id: uuid.UUID, shipment_in: DrugShipmentCreate, db: AsyncSession = Depends(get_db_session), current_user=Depends(get_current_user), ) -> DrugShipmentRead: await _ensure_study_exists(db, study_id) shipment = await shipment_crud.create_shipment(db, study_id, shipment_in, created_by=current_user.id) await audit_crud.log_action( db, study_id=study_id, entity_type="drug_shipment", entity_id=shipment.id, action="CREATE_DRUG_SHIPMENT", detail=f"Drug shipment {shipment.id} created", operator_id=current_user.id, operator_role=current_user.role, ) return DrugShipmentRead.model_validate(shipment) @router.get( "/shipments", response_model=list[DrugShipmentRead], dependencies=[Depends(require_study_member())], ) async def list_shipments( study_id: uuid.UUID, site_name: str | None = None, tracking_no: str | None = None, status: str | None = None, skip: int = 0, limit: int = 100, db: AsyncSession = Depends(get_db_session), ) -> list[DrugShipmentRead]: await _ensure_study_exists(db, study_id) items = await shipment_crud.list_shipments( db, study_id, site_name=site_name, tracking_no=tracking_no, status=status, skip=skip, limit=limit ) return [DrugShipmentRead.model_validate(item) for item in items] @router.get( "/shipments/{shipment_id}", response_model=DrugShipmentRead, dependencies=[Depends(require_study_member())], ) async def get_shipment( study_id: uuid.UUID, shipment_id: uuid.UUID, db: AsyncSession = Depends(get_db_session), ) -> DrugShipmentRead: await _ensure_study_exists(db, study_id) shipment = await shipment_crud.get_shipment(db, shipment_id) if not shipment or shipment.study_id != study_id: raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Shipment not found") return DrugShipmentRead.model_validate(shipment) @router.patch( "/shipments/{shipment_id}", response_model=DrugShipmentRead, dependencies=[Depends(require_study_roles(["PM", "CRA"]))], ) async def update_shipment( study_id: uuid.UUID, shipment_id: uuid.UUID, shipment_in: DrugShipmentUpdate, db: AsyncSession = Depends(get_db_session), current_user=Depends(get_current_user), ) -> DrugShipmentRead: await _ensure_study_exists(db, study_id) shipment = await shipment_crud.get_shipment(db, shipment_id) if not shipment or shipment.study_id != study_id: raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Shipment not found") shipment = await shipment_crud.update_shipment(db, shipment, shipment_in) await audit_crud.log_action( db, study_id=study_id, entity_type="drug_shipment", entity_id=shipment_id, action="UPDATE_DRUG_SHIPMENT", detail=f"Drug shipment {shipment_id} updated", operator_id=current_user.id, operator_role=current_user.role, ) return DrugShipmentRead.model_validate(shipment) @router.delete( "/shipments/{shipment_id}", status_code=status.HTTP_204_NO_CONTENT, dependencies=[Depends(require_study_roles(["PM", "CRA"]))], ) async def delete_shipment( study_id: uuid.UUID, shipment_id: uuid.UUID, db: AsyncSession = Depends(get_db_session), current_user=Depends(get_current_user), ) -> None: await _ensure_study_exists(db, study_id) shipment = await shipment_crud.get_shipment(db, shipment_id) if not shipment or shipment.study_id != study_id: raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Shipment not found") await shipment_crud.delete_shipment(db, shipment) await audit_crud.log_action( db, study_id=study_id, entity_type="drug_shipment", entity_id=shipment_id, action="DELETE_DRUG_SHIPMENT", detail=f"Drug shipment {shipment_id} deleted", operator_id=current_user.id, operator_role=current_user.role, )