campuseats 0.1.0__py3-none-any.whl

campuseats/__main__.py

@@ -0,0 +1,25 @@
+#!/usr/bin/env python
+"""Console entry point: run Django management commands for CampusEats.
+
+Installed as the `campuseats` command (see [project.scripts] in pyproject.toml),
+so `campuseats migrate`, `campuseats runserver`, etc. work after `pip install`.
+"""
+import os
+import sys
+
+
+def main():
+    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'campuseats.backend.settings')
+    try:
+        from django.core.management import execute_from_command_line
+    except ImportError as exc:
+        raise ImportError(
+            "Couldn't import Django. Are you sure it's installed and "
+            "available on your PYTHONPATH environment variable? Did you "
+            "forget to activate a virtual environment?"
+        ) from exc
+    execute_from_command_line(sys.argv)
+
+
+if __name__ == '__main__':
+    main()

campuseats/app/admin.py

@@ -0,0 +1,47 @@
+from django.contrib import admin
+
+from .models import User, Location, MealOrder, Courier, CourierHub
+
+
+@admin.register(User)
+class UserAdmin(admin.ModelAdmin):
+    list_display = ['id', 'username', 'role', 'is_active', 'created_at']
+    list_filter = ['role', 'is_active', 'created_at']
+    search_fields = ['username']
+
+
+@admin.register(Location)
+class LocationAdmin(admin.ModelAdmin):
+    list_display = ['id', 'title', 'latitude', 'longitude']
+    search_fields = ['title']
+
+
+@admin.register(CourierHub)
+class CourierHubAdmin(admin.ModelAdmin):
+    list_display = ['hub_id', 'name', 'number_free_couriers', 'created_at']
+    list_filter = ['created_at']
+    search_fields = ['name']
+    readonly_fields = ['number_free_couriers', 'created_at']
+
+
+@admin.register(Courier)
+class CourierAdmin(admin.ModelAdmin):
+    list_display = ['courier_id', 'max_weight', 'status', 'hub', 'status_changed_at']
+    list_filter = ['status', 'hub', 'max_weight']
+    search_fields = ['courier_id']
+    readonly_fields = ['status_changed_at', 'created_at']
+    actions = ['send_to_service']
+
+    @admin.action(description='Перевести в тех. обслуживание')
+    def send_to_service(self, request, queryset):
+        for courier in queryset:
+            if courier.status != 2:
+                courier.mark_service()
+
+
+@admin.register(MealOrder)
+class MealOrderAdmin(admin.ModelAdmin):
+    list_display = ['id', 'title', 'weight', 'user', 'courier', 'status', 'created_at']
+    list_filter = ['status', 'weight']
+    search_fields = ['title']
+    date_hierarchy = 'created_at'

campuseats/app/apps.py

@@ -0,0 +1,6 @@
+from django.apps import AppConfig
+
+
+class AppConfig(AppConfig):
+    default_auto_field = 'django.db.models.BigAutoField'
+    name = 'campuseats.app'

campuseats/app/authentication.py

@@ -0,0 +1,5 @@
+from rest_framework.authentication import TokenAuthentication
+
+
+class BearerToken(TokenAuthentication):
+    keyword = "Bearer"

campuseats/app/exceptions.py

@@ -0,0 +1,31 @@
+from rest_framework import status
+from rest_framework.exceptions import APIException
+from rest_framework.response import Response
+from rest_framework.views import exception_handler
+
+
+class NoFreeCouriers(APIException):
+    status_code = status.HTTP_409_CONFLICT
+    default_detail = 'No free couriers'
+
+
+def custom_exception_handler(exc, context):
+    response = exception_handler(exc, context)
+    if response is None:
+        return response
+
+    code = response.status_code
+
+    if code == 400:
+        return Response({'msg': 'Validation error', 'code': 422, 'errors': response.data},
+                        status=status.HTTP_422_UNPROCESSABLE_ENTITY)
+    if code == 401:
+        return Response({'msg': 'Нет или невалидный токен', 'code': 401}, status=401)
+    if code == 403:
+        return Response({'msg': 'Недостаточно прав', 'code': 403}, status=403)
+    if code == 404:
+        return Response({'msg': 'Not Found', 'code': 404}, status=404)
+    if code == 409:
+        return Response({'msg': 'No free couriers', 'code': 409}, status=409)
+
+    return response

campuseats/app/migrations/0001_initial.py

@@ -0,0 +1,129 @@
+# Generated by Django 5.1.4 on 2026-07-05 10:00
+
+import django.contrib.auth.models
+import django.db.models.deletion
+import django.utils.timezone
+import uuid
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('auth', '0012_alter_user_first_name_max_length'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='User',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('password', models.CharField(max_length=128, verbose_name='password')),
+                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
+                ('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
+                ('first_name', models.CharField(blank=True, max_length=150, verbose_name='first name')),
+                ('last_name', models.CharField(blank=True, max_length=150, verbose_name='last name')),
+                ('email', models.EmailField(blank=True, max_length=254, verbose_name='email address')),
+                ('is_staff', models.BooleanField(default=False, help_text='Designates whether the user can log into this admin site.', verbose_name='staff status')),
+                ('date_joined', models.DateTimeField(default=django.utils.timezone.now, verbose_name='date joined')),
+                ('username', models.CharField(max_length=256, unique=True)),
+                ('role', models.IntegerField(choices=[(0, 'admin'), (1, 'kitchen'), (2, 'student')], default=2)),
+                ('is_active', models.BooleanField(default=True)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.group', verbose_name='groups')),
+                ('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.permission', verbose_name='user permissions')),
+            ],
+            options={
+                'verbose_name': 'user',
+                'verbose_name_plural': 'users',
+                'abstract': False,
+            },
+            managers=[
+                ('objects', django.contrib.auth.models.UserManager()),
+            ],
+        ),
+        migrations.CreateModel(
+            name='CourierHub',
+            fields=[
+                ('hub_id', models.UUIDField(default=uuid.uuid4, editable=False, primary_key=True, serialize=False)),
+                ('name', models.CharField(max_length=256, unique=True)),
+                ('number_free_couriers', models.PositiveIntegerField(default=0)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+            ],
+            options={
+                'indexes': [models.Index(fields=['number_free_couriers'], name='app_courier_number__156560_idx')],
+            },
+        ),
+        migrations.CreateModel(
+            name='Location',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('title', models.CharField(max_length=256, unique=True)),
+                ('latitude', models.DecimalField(decimal_places=6, max_digits=9)),
+                ('longitude', models.DecimalField(decimal_places=6, max_digits=9)),
+            ],
+            options={
+                'indexes': [models.Index(fields=['latitude'], name='app_locatio_latitud_fe7f4e_idx'), models.Index(fields=['longitude'], name='app_locatio_longitu_af28cd_idx')],
+            },
+        ),
+        migrations.CreateModel(
+            name='Courier',
+            fields=[
+                ('courier_id', models.UUIDField(default=uuid.uuid4, editable=False, primary_key=True, serialize=False)),
+                ('max_weight', models.PositiveIntegerField()),
+                ('status', models.IntegerField(choices=[(0, 'Свободен'), (1, 'В пути'), (2, 'Тех. обслуживание')], default=0)),
+                ('status_changed_at', models.DateTimeField(default=django.utils.timezone.now)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('hub', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='app.courierhub')),
+                ('end_location', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='end_location', to='app.location')),
+                ('start_location', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='start_location', to='app.location')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='MealOrder',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('title', models.CharField(max_length=256, unique=True)),
+                ('weight', models.PositiveIntegerField()),
+                ('idempotency_key', models.CharField(blank=True, max_length=256, null=True, unique=True)),
+                ('status', models.IntegerField(choices=[(0, 'created'), (1, 'assigned'), (2, 'delivered'), (3, 'cancelled')], default=0)),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('courier', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='app.courier')),
+                ('end_location', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='end_location_order', to='app.location')),
+                ('start_location', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='start_location_order', to='app.location')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)),
+            ],
+        ),
+        migrations.AddField(
+            model_name='courier',
+            name='order',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='order', to='app.mealorder'),
+        ),
+        migrations.AddIndex(
+            model_name='mealorder',
+            index=models.Index(fields=['weight'], name='app_mealord_weight_0e6eea_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='mealorder',
+            index=models.Index(fields=['user'], name='app_mealord_user_id_b14336_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='mealorder',
+            index=models.Index(fields=['status', 'created_at'], name='app_mealord_status_14deff_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='courier',
+            index=models.Index(fields=['hub'], name='app_courier_hub_id_69d3e9_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='courier',
+            index=models.Index(fields=['status'], name='app_courier_status_c1044b_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='courier',
+            index=models.Index(fields=['status', 'hub'], name='app_courier_status_76c6f2_idx'),
+        ),
+    ]

campuseats/app/models.py

@@ -0,0 +1,148 @@
+import uuid
+
+from django.db import models
+from django.contrib.auth.models import AbstractUser
+from django.utils import timezone
+from rest_framework.serializers import ValidationError
+
+
+class User(AbstractUser):
+    username = models.CharField(unique=True, max_length=256)
+    role = models.IntegerField(
+        choices=(
+            (0, 'admin'),
+            (1, 'kitchen'),
+            (2, 'student'),
+        ), default=2
+    )
+    is_active = models.BooleanField(default=True)
+    created_at = models.DateTimeField(auto_now_add=True)
+
+
+class Location(models.Model):
+    title = models.CharField(unique=True, max_length=256)
+    latitude = models.DecimalField(max_digits=9, decimal_places=6)
+    longitude = models.DecimalField(max_digits=9, decimal_places=6)
+
+    class Meta:
+        indexes = [
+            models.Index(fields=['latitude']),
+            models.Index(fields=['longitude'])
+        ]
+
+    def __str__(self):
+        return self.title
+
+
+class CourierHub(models.Model):
+    hub_id = models.UUIDField(default=uuid.uuid4, primary_key=True, editable=False)
+    name = models.CharField(unique=True, max_length=256)
+    number_free_couriers = models.PositiveIntegerField(default=0)
+    created_at = models.DateTimeField(auto_now_add=True)
+
+    def update_number_free_couriers(self):
+        self.number_free_couriers = Courier.objects.filter(
+            status=0, hub=self
+        ).count()
+        self.save(update_fields=['number_free_couriers'])
+
+    def __str__(self):
+        return self.name
+
+    class Meta:
+        indexes = [
+            models.Index(fields=['number_free_couriers'])
+        ]
+
+
+class Courier(models.Model):
+    courier_id = models.UUIDField(default=uuid.uuid4, primary_key=True, editable=False)
+    max_weight = models.PositiveIntegerField()
+    status = models.IntegerField(
+        choices=(
+            (0, 'Свободен'),
+            (1, 'В пути'),
+            (2, 'Тех. обслуживание'),
+        ), default=0
+    )
+    order = models.ForeignKey("MealOrder", models.SET_NULL, null=True, blank=True, related_name='order')
+    start_location = models.ForeignKey(Location, models.CASCADE, related_name='start_location')
+    end_location = models.ForeignKey(Location, models.CASCADE, related_name='end_location')
+    hub = models.ForeignKey(CourierHub, models.CASCADE)
+    status_changed_at = models.DateTimeField(default=timezone.now)
+    created_at = models.DateTimeField(auto_now_add=True)
+
+    def clean(self):
+        if self.start_location_id == self.end_location_id:
+            raise ValidationError({
+                "msg": 'end и start не могут совпадать'
+            })
+
+    def mark_in_transit(self):
+        if self.status == 1:
+            raise ValidationError({'msg': 'Курьер и так в пути'})
+        self.status = 1
+        self.status_changed_at = timezone.now()
+        self.save()
+        self.hub.update_number_free_couriers()
+
+    def mark_free(self):
+        if self.status == 0:
+            raise ValidationError({'msg': 'Курьер и так свободен'})
+        self.status = 0
+        self.status_changed_at = timezone.now()
+        self.order = None
+        self.save()
+        self.hub.update_number_free_couriers()
+
+    def mark_service(self):
+        if self.status == 2:
+            raise ValidationError({'msg': 'Курьер и так в тех. обслуживании'})
+        self.status = 2
+        self.status_changed_at = timezone.now()
+        self.order = None
+        self.save()
+        self.hub.update_number_free_couriers()
+
+    def can_take_cargo(self, weight):
+        return self.max_weight >= weight
+
+    class Meta:
+        indexes = [
+            models.Index(fields=['hub']),
+            models.Index(fields=['status']),
+            models.Index(fields=['status', 'hub']),
+        ]
+
+    def __str__(self):
+        return f'{self.courier_id} - {self.max_weight}'
+
+
+class MealOrder(models.Model):
+    title = models.CharField(unique=True, max_length=256)
+    weight = models.PositiveIntegerField()
+    user = models.ForeignKey(User, models.CASCADE)
+    courier = models.ForeignKey(Courier, models.SET_NULL, null=True, blank=True)
+    start_location = models.ForeignKey(Location, models.CASCADE, related_name='start_location_order')
+    end_location = models.ForeignKey(Location, models.CASCADE, related_name='end_location_order')
+    idempotency_key = models.CharField(unique=True, null=True, blank=True, max_length=256)
+    status = models.IntegerField(
+        choices=(
+            (0, 'created'),
+            (1, 'assigned'),
+            (2, 'delivered'),
+            (3, 'cancelled'),
+        ), default=0
+    )
+    created_at = models.DateTimeField(auto_now_add=True)
+
+    def clean(self):
+        if self.start_location_id == self.end_location_id:
+            raise ValidationError({'msg': 'end и start не могут совпадать'})
+
+    class Meta:
+        indexes = [
+            models.Index(fields=['weight']),
+            models.Index(fields=['user']),
+            models.Index(fields=['status', 'created_at']),
+        ]

campuseats/app/permissions.py

@@ -0,0 +1,47 @@
+from rest_framework import permissions
+
+ADMIN, KITCHEN, STUDENT = 0, 1, 2
+
+
+def _role(request):
+    user = request.user
+    return user.role if (user and user.is_authenticated) else None
+
+
+class NotAuth(permissions.BasePermission):
+    def has_permission(self, request, view):
+        return not request.user.is_authenticated
+
+
+class AdminOnly(permissions.BasePermission):
+    def has_permission(self, request, view):
+        return _role(request) == ADMIN
+
+
+class KitchenAndAdmin(permissions.BasePermission):
+    def has_permission(self, request, view):
+        return _role(request) in (ADMIN, KITCHEN)
+
+
+class GetOrAdmin(permissions.BasePermission):
+    """Locations: GET — всем (в т.ч. гость); запись — только admin."""
+    def has_permission(self, request, view):
+        if request.method in permissions.SAFE_METHODS:
+            return True
+        return _role(request) == ADMIN
+
+
+class AuthGetOrAdmin(permissions.BasePermission):
+    """Homes: GET — авторизованным (student/kitchen/admin); запись — только admin."""
+    def has_permission(self, request, view):
+        if request.method in permissions.SAFE_METHODS:
+            return _role(request) is not None
+        return _role(request) == ADMIN
+
+
+class AuthGetOrAdminAndKitchen(permissions.BasePermission):
+    """Couriers: GET — всем (в т.ч. гость); запись — kitchen/admin."""
+    def has_permission(self, request, view):
+        if request.method in permissions.SAFE_METHODS:
+            return True
+        return _role(request) in (ADMIN, KITCHEN)

campuseats/app/serializers.py

@@ -0,0 +1,84 @@
+from decimal import Decimal
+
+from rest_framework import serializers
+
+from .models import Location, Courier, CourierHub, User, MealOrder
+
+
+class LocationSerializer(serializers.ModelSerializer):
+    latitude = serializers.DecimalField(min_value=Decimal('-90'), max_value=Decimal('90'),
+                                        max_digits=9, decimal_places=6)
+    longitude = serializers.DecimalField(min_value=Decimal('-180'), max_value=Decimal('180'),
+                                         max_digits=9, decimal_places=6)
+
+    class Meta:
+        model = Location
+        fields = '__all__'
+
+
+class CourierSerializer(serializers.ModelSerializer):
+    status_label = serializers.CharField(source='get_status_display', read_only=True)
+
+    class Meta:
+        model = Courier
+        fields = '__all__'
+        read_only_fields = ['courier_id', 'status', 'order', 'status_changed_at', 'created_at']
+
+    def validate(self, attrs):
+        if attrs.get('start_location') == attrs.get('end_location'):
+            raise serializers.ValidationError({'end_location': 'end и start не могут совпадать'})
+        return attrs
+
+
+class MealOrderSerializer(serializers.ModelSerializer):
+    weight = serializers.IntegerField(min_value=1)
+
+    class Meta:
+        model = MealOrder
+        fields = '__all__'
+        read_only_fields = ['user', 'courier', 'idempotency_key', 'status', 'created_at']
+
+    def validate(self, attrs):
+        if attrs.get('start_location') == attrs.get('end_location'):
+            raise serializers.ValidationError({'end_location': 'end и start не могут совпадать'})
+        return attrs
+
+
+class UserSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = User
+        fields = ['id', 'username', 'role', 'is_active', 'created_at']
+
+
+class CourierHubSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = CourierHub
+        fields = '__all__'
+        read_only_fields = ['hub_id', 'number_free_couriers', 'created_at']
+
+
+class RegisterSerializer(serializers.ModelSerializer):
+    password = serializers.CharField(write_only=True)
+
+    class Meta:
+        model = User
+        fields = ('id', 'username', 'password')
+
+    def create(self, validated_data):
+        return User.objects.create_user(role=2, **validated_data)
+
+
+class LoginSerializer(serializers.Serializer):
+    username = serializers.CharField()
+    password = serializers.CharField(write_only=True)
+
+
+class AllocateSerializer(serializers.Serializer):
+    weight = serializers.IntegerField(min_value=1)
+    start_id = serializers.PrimaryKeyRelatedField(queryset=Location.objects.all())
+    end_id = serializers.PrimaryKeyRelatedField(queryset=Location.objects.all())
+
+    def validate(self, attrs):
+        if attrs['start_id'] == attrs['end_id']:
+            raise serializers.ValidationError({'end_id': 'end и start не могут совпадать'})
+        return attrs

campuseats/app/tests.py

@@ -0,0 +1,68 @@
+import pytest
+from rest_framework.test import APIClient
+from rest_framework.authtoken.models import Token
+
+from campuseats.app.models import User, Location, CourierHub, Courier
+
+
+def user(role, name='u'):
+    return User.objects.create_user(username=name, password='pass12345', role=role)
+
+
+def client(u=None):
+    c = APIClient()
+    if u:
+        token, _ = Token.objects.get_or_create(user=u)
+        c.credentials(HTTP_AUTHORIZATION='Bearer ' + token.key)
+    return c
+
+
+def two_locations():
+    a = Location.objects.create(title='A', latitude='55', longitude='37')
+    b = Location.objects.create(title='B', latitude='56', longitude='38')
+    return a, b
+
+
+@pytest.mark.django_db
+def test_register_and_login():
+    c = client()
+    assert c.post('/api/users/registration/', {'username': 'a', 'password': 'pass12345'}, format='json').status_code == 201
+    r = c.post('/api/users/login/', {'username': 'a', 'password': 'pass12345'}, format='json')
+    assert r.status_code == 200 and 'token' in r.data
+
+
+@pytest.mark.django_db
+def test_permissions():
+    assert client().get('/api/homes/').status_code == 401          # гость
+    assert client(user(2)).get('/api/users/').status_code == 403   # student
+    assert client(user(0, 'adm')).get('/api/users/').status_code == 200  # admin
+
+
+@pytest.mark.django_db
+def test_locations_public_and_admin_write():
+    two_locations()
+    assert client().get('/api/locations/').status_code == 200
+    r = client(user(0, 'adm')).post('/api/locations/',
+                                    {'title': 'C', 'latitude': '1', 'longitude': '2'}, format='json')
+    assert r.status_code == 201
+
+
+@pytest.mark.django_db
+def test_allocate_and_no_free():
+    a, b = two_locations()
+    hub = CourierHub.objects.create(name='H')
+    Courier.objects.create(max_weight=10, status=0, start_location=a, end_location=b, hub=hub)
+    hub.update_number_free_couriers()
+    c = client(user(1, 'kit'))
+    assert c.post('/api/allocate/', {'weight': 3, 'start_id': a.id, 'end_id': b.id}, format='json').status_code == 201
+    assert c.post('/api/allocate/', {'weight': 3, 'start_id': a.id, 'end_id': b.id}, format='json').status_code == 409
+
+
+@pytest.mark.django_db
+def test_order_idempotency():
+    a, b = two_locations()
+    c = client(user(2, 'stu'))
+    body = {'title': 'O', 'weight': 3, 'start_location': a.id, 'end_location': b.id}
+    r1 = c.post('/api/orders/', body, format='json', HTTP_IDEMPOTENCY_KEY='k1')
+    r2 = c.post('/api/orders/', body, format='json', HTTP_IDEMPOTENCY_KEY='k1')
+    assert r1.status_code == 201 and r2.status_code == 200

campuseats/app/urls.py

@@ -0,0 +1,27 @@
+from django.urls import path, include
+from campuseats.app import views
+
+user_urls = [
+    path('', views.UserList.as_view()),
+    path('registration/', views.Register.as_view()),
+    path('login/', views.Login.as_view())
+]
+
+urlpatterns = [
+    path('users/', include(user_urls)),
+
+    path('locations/', views.LocationListCreate.as_view()),
+    path('locations/<int:pk>/', views.LocationRetrieveUpdateDestroy.as_view()),
+
+    path('homes/', views.CourierHubListCreate.as_view()),
+    path('homes/<pk>/', views.CourierHubRetrieveUpdateDestroy.as_view()),
+
+    path('couriers/', views.CourierListCreate.as_view()),
+    path('couriers/<pk>/', views.CourierRetrieveUpdateDestroy.as_view()),
+    path('couriers/<pk>/in-transit/', views.CourierInTransit.as_view()),
+    path('couriers/<pk>/free/', views.CourierFree.as_view()),
+    path('couriers/<pk>/service/', views.CourierService.as_view()),
+
+    path('allocate/', views.Allocate.as_view()),
+    path('orders/', views.MealOrderListCreate.as_view())
+]

campuseats/app/views.py

@@ -0,0 +1,179 @@
+import logging
+
+from django.contrib.auth import authenticate
+from django.db import transaction
+from rest_framework import generics, status, permissions
+from rest_framework.exceptions import AuthenticationFailed
+from rest_framework.generics import get_object_or_404
+from rest_framework.response import Response
+from rest_framework.authtoken.models import Token
+
+from .exceptions import NoFreeCouriers
+from .models import Location, MealOrder, Courier, CourierHub, User
+from .serializers import (LoginSerializer, MealOrderSerializer, CourierSerializer, CourierHubSerializer,
+                          RegisterSerializer, LocationSerializer, UserSerializer, AllocateSerializer)
+from .permissions import (AdminOnly, KitchenAndAdmin, GetOrAdmin, AuthGetOrAdmin,
+                          AuthGetOrAdminAndKitchen, NotAuth)
+
+logger = logging.getLogger('app')
+
+
+class Register(generics.CreateAPIView):
+    queryset = User.objects.all()
+    serializer_class = RegisterSerializer
+    permission_classes = [NotAuth]
+
+
+class Login(generics.CreateAPIView):
+    serializer_class = LoginSerializer
+    permission_classes = [permissions.AllowAny]
+
+    def create(self, request, *args, **kwargs):
+        data = self.get_serializer(data=request.data)
+        data.is_valid(raise_exception=True)
+        user = authenticate(username=data.validated_data['username'],
+                            password=data.validated_data['password'])
+        if user is None:
+            raise AuthenticationFailed('Неверный логин или пароль')
+        token, _ = Token.objects.get_or_create(user=user)
+        return Response({'id': user.id, 'username': user.username, 'token': token.key})
+
+
+class UserList(generics.ListAPIView):
+    queryset = User.objects.all()
+    serializer_class = UserSerializer
+    permission_classes = [AdminOnly]
+
+
+class LocationListCreate(generics.ListCreateAPIView):
+    queryset = Location.objects.all()
+    serializer_class = LocationSerializer
+    permission_classes = [GetOrAdmin]
+
+
+class LocationRetrieveUpdateDestroy(generics.RetrieveUpdateDestroyAPIView):
+    queryset = Location.objects.all()
+    serializer_class = LocationSerializer
+    permission_classes = [GetOrAdmin]
+
+
+class CourierHubListCreate(generics.ListCreateAPIView):
+    queryset = CourierHub.objects.all()
+    serializer_class = CourierHubSerializer
+    permission_classes = [AuthGetOrAdmin]
+
+
+class CourierHubRetrieveUpdateDestroy(generics.RetrieveUpdateDestroyAPIView):
+    queryset = CourierHub.objects.all()
+    serializer_class = CourierHubSerializer
+    permission_classes = [AuthGetOrAdmin]
+
+
+class CourierListCreate(generics.ListCreateAPIView):
+    serializer_class = CourierSerializer
+    permission_classes = [AuthGetOrAdminAndKitchen]
+
+    def get_queryset(self):
+        qs = Courier.objects.all()
+        p = self.request.query_params
+        if p.get('status') is not None:
+            qs = qs.filter(status=p['status'])
+        if p.get('hub_id'):
+            qs = qs.filter(hub_id=p['hub_id'])
+        if p.get('min_weight'):
+            qs = qs.filter(max_weight__gte=p['min_weight'])
+        return qs
+
+
+class CourierRetrieveUpdateDestroy(generics.RetrieveUpdateDestroyAPIView):
+    queryset = Courier.objects.all()
+    serializer_class = CourierSerializer
+    permission_classes = [AuthGetOrAdminAndKitchen]
+
+
+class CourierInTransit(generics.CreateAPIView):
+    queryset = Courier.objects.all()
+    permission_classes = [KitchenAndAdmin]
+
+    def post(self, request, *args, **kwargs):
+        courier = self.get_object()
+        courier.start_location = get_object_or_404(Location, pk=request.data.get('start_id'))
+        courier.end_location = get_object_or_404(Location, pk=request.data.get('end_id'))
+        courier.clean()
+        with transaction.atomic():
+            courier.mark_in_transit()
+        logger.info('courier %s in_transit', courier.courier_id)
+        return Response(CourierSerializer(courier).data)
+
+
+class CourierFree(generics.CreateAPIView):
+    queryset = Courier.objects.all()
+    permission_classes = [permissions.IsAuthenticated]
+
+    def post(self, request, *args, **kwargs):
+        courier = self.get_object()
+        with transaction.atomic():
+            courier.mark_free()
+        logger.info('courier %s free', courier.courier_id)
+        return Response(CourierSerializer(courier).data)
+
+
+class CourierService(generics.CreateAPIView):
+    queryset = Courier.objects.all()
+    permission_classes = [KitchenAndAdmin]
+
+    def post(self, request, *args, **kwargs):
+        courier = self.get_object()
+        with transaction.atomic():
+            courier.mark_service()
+        logger.info('courier %s service', courier.courier_id)
+        return Response(CourierSerializer(courier).data)
+
+
+class Allocate(generics.CreateAPIView):
+    serializer_class = AllocateSerializer
+    permission_classes = [KitchenAndAdmin]
+
+    def create(self, request, *args, **kwargs):
+        data = self.get_serializer(data=request.data)
+        data.is_valid(raise_exception=True)
+        weight = data.validated_data['weight']
+        start = data.validated_data['start_id']
+        end = data.validated_data['end_id']
+        with transaction.atomic():
+            courier = (Courier.objects.select_for_update()
+                       .filter(status=0, max_weight__gte=weight)
+                       .order_by('-hub__number_free_couriers', 'status_changed_at')
+                       .first())
+            if courier is None:
+                logger.info('allocate no free couriers, weight %s', weight)
+                raise NoFreeCouriers()
+            courier.start_location = start
+            courier.end_location = end
+            courier.clean()
+            courier.mark_in_transit()
+        logger.info('allocate courier %s weight %s', courier.courier_id, weight)
+        return Response(CourierSerializer(courier).data, status=status.HTTP_201_CREATED)
+
+
+class MealOrderListCreate(generics.ListCreateAPIView):
+    serializer_class = MealOrderSerializer
+    permission_classes = [permissions.IsAuthenticated]
+
+    def get_queryset(self):
+        qs = MealOrder.objects.all()
+        if self.request.user.role == 2:
+            qs = qs.filter(user=self.request.user)
+        return qs
+
+    def create(self, request, *args, **kwargs):
+        key = request.headers.get('Idempotency-Key')
+        if key:
+            order = MealOrder.objects.filter(idempotency_key=key).first()
+            if order:
+                return Response(MealOrderSerializer(order).data)
+        data = self.get_serializer(data=request.data)
+        data.is_valid(raise_exception=True)
+        order = data.save(user=request.user, idempotency_key=key)
+        logger.info('order %s created', order.id)
+        return Response(data.data, status=status.HTTP_201_CREATED)

campuseats/backend/asgi.py

@@ -0,0 +1,16 @@
+"""
+ASGI config for backend project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'campuseats.backend.settings')
+
+application = get_asgi_application()

campuseats/backend/settings.py

@@ -0,0 +1,153 @@
+"""
+Django settings for backend project.
+
+Generated by 'django-admin startproject' using Django 6.0.6.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/topics/settings/
+
+For the full list of settings and their values, see
+https://docs.djangoproject.com/en/6.0/ref/settings/
+"""
+import os
+from pathlib import Path
+
+# Build paths inside the project like this: BASE_DIR / 'subdir'.
+BASE_DIR = Path(__file__).resolve().parent.parent
+
+
+# Quick-start development settings - unsuitable for production
+# See https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/
+
+# SECURITY WARNING: keep the secret key used in production secret!
+SECRET_KEY = 'django-insecure-g%321n1fi_f=!gch&9av^bfxjzon*del25_p1g_x-xjv68j-2p'
+
+# SECURITY WARNING: don't run with debug turned on in production!
+DEBUG = True
+
+ALLOWED_HOSTS = ['localhost', '127.0.0.1']
+
+
+# Application definition
+
+INSTALLED_APPS = [
+    'django.contrib.admin',
+    'django.contrib.auth',
+    'django.contrib.contenttypes',
+    'django.contrib.sessions',
+    'django.contrib.messages',
+    'django.contrib.staticfiles',
+    'rest_framework',
+    'rest_framework.authtoken',
+    'drf_spectacular',
+
+    'campuseats.app'
+]
+
+AUTH_USER_MODEL = 'app.User'
+REST_FRAMEWORK = {
+    'DEFAULT_AUTHENTICATION_CLASSES': ['campuseats.app.authentication.BearerToken'],
+    'DEFAULT_SCHEMA_CLASS':  'drf_spectacular.openapi.AutoSchema',
+    'EXCEPTION_HANDLER': 'campuseats.app.exceptions.custom_exception_handler'
+}
+
+MIDDLEWARE = [
+    'django.middleware.security.SecurityMiddleware',
+    'django.contrib.sessions.middleware.SessionMiddleware',
+    'django.middleware.common.CommonMiddleware',
+    'django.middleware.csrf.CsrfViewMiddleware',
+    'django.contrib.auth.middleware.AuthenticationMiddleware',
+    'django.contrib.messages.middleware.MessageMiddleware',
+    'django.middleware.clickjacking.XFrameOptionsMiddleware',
+]
+
+ROOT_URLCONF = 'campuseats.backend.urls'
+
+TEMPLATES = [
+    {
+        'BACKEND': 'django.template.backends.django.DjangoTemplates',
+        'DIRS': [],
+        'APP_DIRS': True,
+        'OPTIONS': {
+            'context_processors': [
+                'django.template.context_processors.request',
+                'django.contrib.auth.context_processors.auth',
+                'django.contrib.messages.context_processors.messages',
+            ],
+        },
+    },
+]
+
+WSGI_APPLICATION = 'campuseats.backend.wsgi.application'
+
+
+# Database
+# https://docs.djangoproject.com/en/6.0/ref/settings/#databases
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.postgresql',
+        'USER': os.getenv('DB_USER'),
+        'NAME': os.getenv('DB_NAME'),
+        'PASSWORD': os.getenv('DB_PASSWORD'),
+        'HOST': 'db',
+        'PORT': '5432',
+    }
+}
+
+
+# Password validation
+# https://docs.djangoproject.com/en/6.0/ref/settings/#auth-password-validators
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        'NAME': 'django.contrib.auth.password_validation.UserAttributeSimilarityValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.MinimumLengthValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.CommonPasswordValidator',
+    },
+    {
+        'NAME': 'django.contrib.auth.password_validation.NumericPasswordValidator',
+    },
+]
+
+
+# Internationalization
+# https://docs.djangoproject.com/en/6.0/topics/i18n/
+
+LANGUAGE_CODE = 'en-us'
+
+TIME_ZONE = 'UTC'
+
+USE_I18N = True
+
+USE_TZ = True
+
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/6.0/howto/static-files/
+
+STATIC_URL = 'static/'
+
+
+# --- Локальный запуск/тесты без Postgres: SQLite, если DB_NAME не задан ---
+if not os.getenv('DB_NAME'):
+    DATABASES = {
+        'default': {
+            'ENGINE': 'django.db.backends.sqlite3',
+            'NAME': BASE_DIR / 'db.sqlite3',
+        }
+    }
+else:
+    DATABASES['default']['HOST'] = os.getenv('DB_HOST', 'db')
+
+
+LOGGING = {
+    'version': 1,
+    'disable_existing_loggers': False,
+    'handlers': {'console': {'class': 'logging.StreamHandler'}},
+    'loggers': {'app': {'handlers': ['console'], 'level': 'INFO'}},
+}

campuseats/backend/urls.py

@@ -0,0 +1,26 @@
+"""
+URL configuration for backend project.
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/6.0/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  path('', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.urls import include, path
+    2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
+"""
+from django.contrib import admin
+from django.urls import path, include
+from drf_spectacular.views import SpectacularSwaggerView, SpectacularAPIView
+urlpatterns = [
+    path('admin/', admin.site.urls),
+    path('api/', include('campuseats.app.urls')),
+
+    path('schema/', SpectacularAPIView.as_view(), name='schema'),
+    path('schema/swagger/', SpectacularSwaggerView.as_view(url_name='schema'), name='swagger')
+]

campuseats/backend/wsgi.py

@@ -0,0 +1,16 @@
+"""
+WSGI config for backend project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'campuseats.backend.settings')
+
+application = get_wsgi_application()

campuseats-0.1.0.dist-info/METADATA

@@ -0,0 +1,64 @@
+Metadata-Version: 2.4
+Name: campuseats
+Version: 0.1.0
+Summary: CampusEats — Django REST backend for a campus food-delivery service
+Author-email: nazar <fedkedr@gmail.com>
+License: MIT
+Project-URL: Homepage, https://pypi.org/project/campuseats/
+Keywords: django,rest,campus,delivery
+Classifier: Framework :: Django
+Classifier: Programming Language :: Python :: 3
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+Requires-Dist: Django==6.0.6
+Requires-Dist: djangorestframework==3.17.1
+Requires-Dist: psycopg2-binary==2.9.12
+Requires-Dist: drf-spectacular==0.28.0
+Requires-Dist: asgiref==3.11.1
+Requires-Dist: sqlparse==0.5.5
+Requires-Dist: tzdata==2026.2
+
+# CampusEats
+
+Django REST backend for a campus food-delivery service.
+
+## Install
+
+```bash
+pip install campuseats
+```
+
+## Usage
+
+After installation the `campuseats` console command runs Django management
+commands against the bundled project settings (`campuseats.backend.settings`):
+
+```bash
+campuseats migrate
+campuseats createsuperuser
+campuseats runserver
+```
+
+### Configuration
+
+Database is configured via environment variables (falls back to a local
+SQLite file when `DB_NAME` is unset):
+
+```
+DB_NAME=campus_eats_db
+DB_USER=campus_eats_user
+DB_PASSWORD=campus_eats_pass
+DB_HOST=localhost
+DB_PORT=5432
+```
+
+## Package layout
+
+- `campuseats.backend` — Django project config (settings, urls, wsgi, asgi)
+- `campuseats.app` — application (models, views, serializers, migrations)
+
+## License
+
+MIT

campuseats-0.1.0.dist-info/RECORD

@@ -0,0 +1,25 @@
+campuseats/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+campuseats/__main__.py,sha256=VTtT1e-tSFAMV8E7-zb_RGO2kPTyRfnhFP0BjZkfaTw,813
+campuseats/app/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+campuseats/app/admin.py,sha256=mrfnFyywEkSvLD6Bwc2CbtTA1gg8flElhOp8i7sjKRs,1582
+campuseats/app/apps.py,sha256=AioYNyDfJYhcXrKlwo_0kyZwJ5STqYG9v25zLxYi6RQ,149
+campuseats/app/authentication.py,sha256=LMkxksCytAS0vjS_wxHR7Uhr1WcsBvYpBLsWz2zT3Js,132
+campuseats/app/exceptions.py,sha256=5VcT07mz-mOpg5sp1d9uHBY8VF00uVPRiuiXBfUPD5k,1110
+campuseats/app/models.py,sha256=4lvihExg-u7Rc9Bq7x27m7xwCWHviD4hUkctmIzEg3A,5102
+campuseats/app/permissions.py,sha256=XvQTcBy57uBGnLzQQreQRUhxVGFa_smICwOtwgGx2Y8,1597
+campuseats/app/serializers.py,sha256=X8jf-vt8RDUifP4GZdV4RUwTS-AnZyDcYbQfmOP1WiU,2929
+campuseats/app/tests.py,sha256=m1DW4l1pDzyiTLTvIKQoAfiUeHrPHZDASxQh4ttO5Nc,2584
+campuseats/app/urls.py,sha256=-yUlf2R-r6wOeYFpfYW5m77wsyOu4F1sA3Gvd4ZCVEg,999
+campuseats/app/views.py,sha256=tUXmTui5laBNTSt_51ydWZ_sLf-EnEWwQ4IfetVydIE,6780
+campuseats/app/migrations/0001_initial.py,sha256=mi8KQsiZ8ybevHeAq8XrA32Nuie8qfGZcotYqtxDbjQ,7501
+campuseats/app/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+campuseats/backend/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+campuseats/backend/asgi.py,sha256=DyAzhRB5jr7Y-FYY7wHaz2I6hKlJ7B44PC2k8wTxplE,402
+campuseats/backend/settings.py,sha256=yK6li5G9Z8QKmtDHl3dycjIqMcyMSggq4W-VIba2a0Q,4136
+campuseats/backend/urls.py,sha256=xjqCTf9t3D00FpK4mbExYZ0iRVkONK-bRq08H3IRPdI,1060
+campuseats/backend/wsgi.py,sha256=LLzP5DkNEggWhwBfO7kf9KeQY6t40yEjNsICG6wP_7M,402
+campuseats-0.1.0.dist-info/METADATA,sha256=7G2EkG3W4EGXAIDHuHS1MWCFAIfpn9XcVxQiSHFJHN8,1634
+campuseats-0.1.0.dist-info/WHEEL,sha256=K260EYznzXsJYBQGqmI8VTxEdiZYNvDZwW9cBh9-_MA,91
+campuseats-0.1.0.dist-info/entry_points.txt,sha256=0ZvCa6whj0tqlWgu-47VECJ9TSmZAhr5vpYW5jPIV_Y,56
+campuseats-0.1.0.dist-info/top_level.txt,sha256=JeX-zwixPr4fWy1IYDKKchDZgv-mAGEInah-FAbaWXE,11
+campuseats-0.1.0.dist-info/RECORD,,

campuseats-0.1.0.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (83.0.0)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

campuseats-0.1.0.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+campuseats = campuseats.__main__:main

campuseats-0.1.0.dist-info/top_level.txt

@@ -0,0 +1 @@
+campuseats