"""Hospitality permissions APIs — Phase 12.0.""" from __future__ import annotations from uuid import UUID from fastapi import APIRouter, Depends, status from sqlalchemy.ext.asyncio import AsyncSession from app.api.deps import get_db, get_pagination, require_tenant from app.core.security import get_current_user from app.schemas.foundation import ( HospitalityPermissionCreate, HospitalityPermissionRead, ) from app.services.foundation import HospitalityPermissionService from shared.pagination import PaginationParams from shared.security import CurrentUser router = APIRouter() @router.post("", response_model=HospitalityPermissionRead, status_code=status.HTTP_201_CREATED) async def create_item( body: HospitalityPermissionCreate, tenant_id: UUID = Depends(require_tenant), db: AsyncSession = Depends(get_db), user: CurrentUser = Depends(get_current_user), ): return await HospitalityPermissionService(db).create(tenant_id, body, actor=user) @router.get("", response_model=list[HospitalityPermissionRead]) async def list_items( tenant_id: UUID = Depends(require_tenant), pagination: PaginationParams = Depends(get_pagination), db: AsyncSession = Depends(get_db), _user: CurrentUser = Depends(get_current_user), ): return await HospitalityPermissionService(db).list(tenant_id, offset=pagination.offset, limit=pagination.page_size) @router.get("/{permission_id}", response_model=HospitalityPermissionRead) async def get_item( permission_id: UUID, tenant_id: UUID = Depends(require_tenant), db: AsyncSession = Depends(get_db), _user: CurrentUser = Depends(get_current_user), ): return await HospitalityPermissionService(db).get(tenant_id, permission_id)