Adding delete option for scopes

app/templates/_scopes_table_card.html

@@ -30,13 +30,16 @@
         {% for ct in column_types %}
           <th data-sort-off>{{ ct.name }}</th>
         {% endfor %}
+        {% if can_write_scopes %}
+          <th data-sort-off></th>
+        {% endif %}
       </tr>
     </thead>
     <tbody>
       {% for row in rows %}
         {% set scope = row.scope %}
         {% set info = row.info %}
-        <tr>
+        <tr id="scope-row-{{ scope.id }}">
           <td>
             <strong><a href="/admin/augmented-parts/{{ scope.id }}">{{ scope.description }}</a></strong>
             {% if scope.sku %}<br><span class="muted">{{ scope.sku }}</span>{% endif %}
@@ -67,10 +70,19 @@
               {% endif %}
             </td>
           {% endfor %}
+          {% if can_write_scopes %}
+            <td class="row-actions">
+              <button class="btn btn-danger"
+                      hx-delete="/scopes/{{ scope.id }}"
+                      hx-target="#scope-row-{{ scope.id }}"
+                      hx-swap="outerHTML"
+                      hx-confirm="Delete {{ scope.sku or scope.description }}?">Delete</button>
+            </td>
+          {% endif %}
         </tr>
       {% else %}
         <tr>
-          <td colspan="{{ 6 + column_types | length }}" class="muted">
+          <td colspan="{{ 6 + column_types | length + (1 if can_write_scopes else 0) }}" class="muted">
             No scopes match your search.
           </td>
         </tr>

app/web/scopes.py

@@ -5,11 +5,13 @@ non-Scope part type listing the accessories that fit each scope. Supports HTMX
 search/filter over scope attributes and required accessory fits.
 """
 
-from fastapi import APIRouter, Depends, Request
+from fastapi import APIRouter, Depends, HTTPException, Request, Response, status
 from fastapi.responses import HTMLResponse
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.core.database import get_db
+from app.crud import audit as audit_crud
+from app.crud import augmented_part as augmented_part_crud
 from app.crud import manufacturer as manufacturer_crud
 from app.crud import part_type as part_type_crud
 from app.crud import scope_model as scope_model_crud
@@ -26,6 +28,10 @@ def _to_int(value: str) -> int | None:
     return int(value) if value.strip() else None
 
 
+def _can_write_scopes(user: User) -> bool:
+    return user.is_superuser or "augmented_parts:write" in user.permissions
+
+
 async def _build(db: AsyncSession, filters: dict) -> dict:
     """Run the guide query for the given raw (string) filter values."""
     return await scope_guide_service.build(
@@ -77,7 +83,13 @@ async def scopes_page(
     return templates.TemplateResponse(
         request,
         "scopes.html",
-        {"user": user, "filters": filters, **guide, **(await _filter_options(db))},
+        {
+            "user": user,
+            "filters": filters,
+            "can_write_scopes": _can_write_scopes(user),
+            **guide,
+            **(await _filter_options(db)),
+        },
     )
 
 
@@ -90,7 +102,7 @@ async def scopes_filter(
     sub_part_type_id: str = "",
     fits_part_type_id: str = "",
     db: AsyncSession = Depends(get_db),
-    _: User = Depends(web_require("augmented_parts:read", "fits:read")),
+    user: User = Depends(web_require("augmented_parts:read", "fits:read")),
 ):
     filters = {
         "description": description,
@@ -100,4 +112,32 @@ async def scopes_filter(
         "fits_part_type_id": fits_part_type_id,
     }
     guide = await _build(db, filters)
-    return templates.TemplateResponse(request, "_scopes_table_card.html", guide)
+    return templates.TemplateResponse(
+        request,
+        "_scopes_table_card.html",
+        {**guide, "can_write_scopes": _can_write_scopes(user)},
+    )
+
+
+@router.delete("/scopes/{augmented_part_id}")
+async def delete_scope(
+    augmented_part_id: int,
+    db: AsyncSession = Depends(get_db),
+    actor: User = Depends(web_require("augmented_parts:write")),
+):
+    ap = await augmented_part_crud.get(db, augmented_part_id)
+    if ap is None:
+        raise HTTPException(status_code=404, detail="Scope not found")
+    label = ap.sku or ap.description
+    await augmented_part_crud.delete(db, ap)
+    await audit_crud.log(
+        db,
+        actor=actor,
+        action="delete",
+        resource_type="AugmentedPart",
+        resource_id=augmented_part_id,
+        description=audit_crud.describe_delete(
+            "AugmentedPart", augmented_part_id, label
+        ),
+    )
+    return Response(status_code=status.HTTP_200_OK)