Harden RC7 API response contracts

backend/app/api/routes/areas.py

@@ -8,14 +8,15 @@ from sqlalchemy.orm import Session
 
 from app.db.session import get_db
 from app.models import Area
-from app.schemas.area import AreaCreate, AreaUpdate
+from app.schemas import Envelope
+from app.schemas.area import AreaCreate, AreaList, AreaRead, AreaUpdate
 from app.services.area_service import AreaService
 from app.utils.response import envelope
 
 router = APIRouter(prefix="/projects/{project_id}/areas", tags=["areas"])
 
 
-@router.get("", response_model=dict)
+@router.get("", response_model=Envelope[AreaList])
 def list_areas(
     project_id: UUID,
     limit: int = Query(default=50, ge=1, le=200),
@@ -26,13 +27,13 @@ def list_areas(
     return envelope({"items": [AreaService.serialize_area(area) for area in areas], "total": total, "limit": limit, "offset": offset})
 
 
-@router.post("", status_code=201, response_model=dict)
+@router.post("", status_code=201, response_model=Envelope[AreaRead])
 def create_area(project_id: UUID, payload: AreaCreate, db: Session = Depends(get_db)):
     area = AreaService.create_area(db, project_id, payload)
     return envelope(AreaService.serialize_area(area))
 
 
-@router.get("/{area_id}", response_model=dict)
+@router.get("/{area_id}", response_model=Envelope[AreaRead])
 def get_area(
     project_id: UUID,
     area_id: UUID,
@@ -44,7 +45,7 @@ def get_area(
     return envelope(AreaService.serialize_area(area))
 
 
-@router.patch("/{area_id}", response_model=dict)
+@router.patch("/{area_id}", response_model=Envelope[AreaRead])
 def update_area(
     project_id: UUID,
     area_id: UUID,