feat: enhance employee CRUD with search, filters, and security module

server/src/app/api/v1/endpoints/employees.py

@@ -6,7 +6,7 @@ from fastapi import APIRouter, Depends, HTTPException, Query, status
 from sqlalchemy.orm import Session
 
 from app.api.deps import get_db
-from app.schemas.employee import EmployeeCreate, EmployeeMetaRead, EmployeeRead
+from app.schemas.employee import EmployeeCreate, EmployeeMetaRead, EmployeeRead, EmployeeUpdate
 from app.services.employee import EmployeeService
 
 router = APIRouter()
@@ -41,3 +41,21 @@ def get_employee(employee_id: str, db: DbSession) -> EmployeeRead:
     if employee is None:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Employee not found")
     return employee
+
+
+@router.patch("/{employee_id}", response_model=EmployeeRead)
+def update_employee(employee_id: str, payload: EmployeeUpdate, db: DbSession) -> EmployeeRead:
+    try:
+        return EmployeeService(db).update_employee(employee_id, payload)
+    except LookupError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc)) from exc
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc)) from exc
+
+
+@router.post("/{employee_id}/disable", response_model=EmployeeRead)
+def disable_employee(employee_id: str, db: DbSession) -> EmployeeRead:
+    try:
+        return EmployeeService(db).disable_employee(employee_id)
+    except LookupError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc)) from exc