company flows

backend/app/routers/people.py

@@ -0,0 +1,66 @@
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.exc import IntegrityError
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.database import get_postgres_session
+from app.models import Account
+from app.routers.auth import get_current_account, validate_password
+from app.schemas import OrgMemberCreate, OrgMemberListResponse, OrgMemberRead
+from app.services.org_members import (
+    can_manage_org_members,
+    create_org_member,
+    list_org_members,
+)
+
+router = APIRouter(prefix="/people", tags=["people"])
+
+
+async def require_org_manager(
+    account: Account = Depends(get_current_account),
+    session: AsyncSession = Depends(get_postgres_session),
+) -> Account:
+    if not await can_manage_org_members(session, account):
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Only company admins can manage people.",
+        )
+    return account
+
+
+@router.get("", response_model=OrgMemberListResponse)
+async def get_people(
+    manager: Account = Depends(require_org_manager),
+    session: AsyncSession = Depends(get_postgres_session),
+) -> OrgMemberListResponse:
+    items, counts = await list_org_members(session, manager.company_domain)
+    return OrgMemberListResponse(items=items, counts=counts)
+
+
+@router.post("", response_model=OrgMemberRead, status_code=status.HTTP_201_CREATED)
+async def add_person(
+    payload: OrgMemberCreate,
+    manager: Account = Depends(require_org_manager),
+    session: AsyncSession = Depends(get_postgres_session),
+) -> OrgMemberRead:
+    if not payload.send_invitation:
+        validate_password(payload.password or "")
+
+    try:
+        member = await create_org_member(
+            session,
+            manager=manager,
+            payload=payload,
+        )
+        await session.commit()
+        return member
+    except ValueError as error:
+        raise HTTPException(
+            status_code=status.HTTP_422_UNPROCESSABLE_ENTITY,
+            detail=str(error),
+        ) from error
+    except IntegrityError as error:
+        await session.rollback()
+        raise HTTPException(
+            status_code=status.HTTP_409_CONFLICT,
+            detail="An account with those details already exists.",
+        ) from error