orion/app/api/v1/shop/cart.py

# app/api/v1/shop/cart.py
"""
Shop Shopping Cart API (Public)

Public endpoints for managing shopping cart in shop frontend.
Uses vendor from request.state (injected by VendorContextMiddleware).
No authentication required - uses session ID for cart tracking.
"""

import logging

from fastapi import APIRouter, Body, Depends, HTTPException, Path, Request
from sqlalchemy.orm import Session

from app.core.database import get_db
from app.services.cart_service import cart_service
from models.schema.cart import (
    AddToCartRequest,
    CartOperationResponse,
    CartResponse,
    ClearCartResponse,
    UpdateCartItemRequest,
)

router = APIRouter()
logger = logging.getLogger(__name__)


# ============================================================================
# CART ENDPOINTS
# ============================================================================


@router.get("/cart/{session_id}", response_model=CartResponse)
def get_cart(
    request: Request,
    session_id: str = Path(..., description="Shopping session ID"),
    db: Session = Depends(get_db),
) -> CartResponse:
    """
    Get shopping cart contents for current vendor.

    Vendor is automatically determined from request context.
    No authentication required - uses session ID for cart tracking.

    Path Parameters:
    - session_id: Unique session identifier for the cart
    """
    # Get vendor from middleware
    vendor = getattr(request.state, "vendor", None)

    if not vendor:
        raise HTTPException(
            status_code=404,
            detail="Vendor not found. Please access via vendor domain/subdomain/path.",
        )

    logger.info(
        f"[SHOP_API] get_cart for session {session_id}, vendor {vendor.id}",
        extra={
            "vendor_id": vendor.id,
            "vendor_code": vendor.subdomain,
            "session_id": session_id,
        },
    )

    cart = cart_service.get_cart(db=db, vendor_id=vendor.id, session_id=session_id)

    logger.info(
        f"[SHOP_API] get_cart result: {len(cart.get('items', []))} items in cart",
        extra={
            "session_id": session_id,
            "vendor_id": vendor.id,
            "item_count": len(cart.get("items", [])),
            "total": cart.get("total", 0),
        },
    )

    return CartResponse.from_service_dict(cart)


@router.post("/cart/{session_id}/items", response_model=CartOperationResponse)
def add_to_cart(
    request: Request,
    session_id: str = Path(..., description="Shopping session ID"),
    cart_data: AddToCartRequest = Body(...),
    db: Session = Depends(get_db),
) -> CartOperationResponse:
    """
    Add product to cart for current vendor.

    Vendor is automatically determined from request context.
    No authentication required - uses session ID.

    Path Parameters:
    - session_id: Unique session identifier for the cart

    Request Body:
    - product_id: ID of product to add
    - quantity: Quantity to add (default: 1)
    """
    # Get vendor from middleware
    vendor = getattr(request.state, "vendor", None)

    if not vendor:
        raise HTTPException(
            status_code=404,
            detail="Vendor not found. Please access via vendor domain/subdomain/path.",
        )

    logger.info(
        f"[SHOP_API] add_to_cart: product {cart_data.product_id}, qty {cart_data.quantity}, session {session_id}",
        extra={
            "vendor_id": vendor.id,
            "vendor_code": vendor.subdomain,
            "session_id": session_id,
            "product_id": cart_data.product_id,
            "quantity": cart_data.quantity,
        },
    )

    result = cart_service.add_to_cart(
        db=db,
        vendor_id=vendor.id,
        session_id=session_id,
        product_id=cart_data.product_id,
        quantity=cart_data.quantity,
    )

    logger.info(
        f"[SHOP_API] add_to_cart result: {result}",
        extra={
            "session_id": session_id,
            "result": result,
        },
    )

    return CartOperationResponse(**result)


@router.put(
    "/cart/{session_id}/items/{product_id}", response_model=CartOperationResponse
)
def update_cart_item(
    request: Request,
    session_id: str = Path(..., description="Shopping session ID"),
    product_id: int = Path(..., description="Product ID", gt=0),
    cart_data: UpdateCartItemRequest = Body(...),
    db: Session = Depends(get_db),
) -> CartOperationResponse:
    """
    Update cart item quantity for current vendor.

    Vendor is automatically determined from request context.
    No authentication required - uses session ID.

    Path Parameters:
    - session_id: Unique session identifier for the cart
    - product_id: ID of product to update

    Request Body:
    - quantity: New quantity (must be >= 1)
    """
    # Get vendor from middleware
    vendor = getattr(request.state, "vendor", None)

    if not vendor:
        raise HTTPException(
            status_code=404,
            detail="Vendor not found. Please access via vendor domain/subdomain/path.",
        )

    logger.debug(
        f"[SHOP_API] update_cart_item: product {product_id}, qty {cart_data.quantity}",
        extra={
            "vendor_id": vendor.id,
            "vendor_code": vendor.subdomain,
            "session_id": session_id,
            "product_id": product_id,
            "quantity": cart_data.quantity,
        },
    )

    result = cart_service.update_cart_item(
        db=db,
        vendor_id=vendor.id,
        session_id=session_id,
        product_id=product_id,
        quantity=cart_data.quantity,
    )

    return CartOperationResponse(**result)


@router.delete(
    "/cart/{session_id}/items/{product_id}", response_model=CartOperationResponse
)
def remove_from_cart(
    request: Request,
    session_id: str = Path(..., description="Shopping session ID"),
    product_id: int = Path(..., description="Product ID", gt=0),
    db: Session = Depends(get_db),
) -> CartOperationResponse:
    """
    Remove item from cart for current vendor.

    Vendor is automatically determined from request context.
    No authentication required - uses session ID.

    Path Parameters:
    - session_id: Unique session identifier for the cart
    - product_id: ID of product to remove
    """
    # Get vendor from middleware
    vendor = getattr(request.state, "vendor", None)

    if not vendor:
        raise HTTPException(
            status_code=404,
            detail="Vendor not found. Please access via vendor domain/subdomain/path.",
        )

    logger.debug(
        f"[SHOP_API] remove_from_cart: product {product_id}",
        extra={
            "vendor_id": vendor.id,
            "vendor_code": vendor.subdomain,
            "session_id": session_id,
            "product_id": product_id,
        },
    )

    result = cart_service.remove_from_cart(
        db=db, vendor_id=vendor.id, session_id=session_id, product_id=product_id
    )

    return CartOperationResponse(**result)


@router.delete("/cart/{session_id}", response_model=ClearCartResponse)
def clear_cart(
    request: Request,
    session_id: str = Path(..., description="Shopping session ID"),
    db: Session = Depends(get_db),
) -> ClearCartResponse:
    """
    Clear all items from cart for current vendor.

    Vendor is automatically determined from request context.
    No authentication required - uses session ID.

    Path Parameters:
    - session_id: Unique session identifier for the cart
    """
    # Get vendor from middleware
    vendor = getattr(request.state, "vendor", None)

    if not vendor:
        raise HTTPException(
            status_code=404,
            detail="Vendor not found. Please access via vendor domain/subdomain/path.",
        )

    logger.debug(
        f"[SHOP_API] clear_cart for session {session_id}",
        extra={
            "vendor_id": vendor.id,
            "vendor_code": vendor.subdomain,
            "session_id": session_id,
        },
    )

    result = cart_service.clear_cart(db=db, vendor_id=vendor.id, session_id=session_id)

    return ClearCartResponse(**result)