"""Evidence API — AP0.9b.""" from __future__ import annotations from typing import Literal, Optional from capabilities import require_capability from fastapi import APIRouter, Depends, HTTPException from pydantic import BaseModel, Field from services import evidence as evidence_service from tenant_context import TenantContext router = APIRouter(prefix="/api/evidence", tags=["evidence"]) class EvidenceUpdateRequest(BaseModel): title: Optional[str] = Field(default=None, min_length=1, max_length=255) description: Optional[str] = None status: Optional[Literal["submitted", "accepted", "rejected"]] = None action_id: Optional[str] = None milestone_id: Optional[str] = None clear_action_id: bool = False clear_milestone_id: bool = False @router.get("/{evidence_id}") def get_evidence( evidence_id: str, ctx: TenantContext = Depends(require_capability("kairo.evidence.read")), ): item = evidence_service.get_evidence(tenant_id=ctx.tenant_id, evidence_id=evidence_id) if not item: raise HTTPException(status_code=404, detail="Evidence nicht gefunden") return item @router.patch("/{evidence_id}") def update_evidence( evidence_id: str, body: EvidenceUpdateRequest, ctx: TenantContext = Depends(require_capability("kairo.evidence.manage")), ): try: item = evidence_service.update_evidence( tenant_id=ctx.tenant_id, evidence_id=evidence_id, user_id=ctx.user_id, title=body.title, description=body.description, status=body.status, action_id=body.action_id, milestone_id=body.milestone_id, clear_action_id=body.clear_action_id, clear_milestone_id=body.clear_milestone_id, ) except ValueError as exc: raise HTTPException(status_code=400, detail=str(exc)) from exc if not item: raise HTTPException(status_code=404, detail="Evidence nicht gefunden") return item @router.delete("/{evidence_id}", status_code=204) def delete_evidence( evidence_id: str, ctx: TenantContext = Depends(require_capability("kairo.evidence.manage")), ): if not evidence_service.delete_evidence( tenant_id=ctx.tenant_id, evidence_id=evidence_id, user_id=ctx.user_id ): raise HTTPException(status_code=404, detail="Evidence nicht gefunden")