Merge pull request 'behruz' (#123) from behruz into main

Reviewed-on: #123

.env.example

@@ -73,6 +73,5 @@ STORAGE_BUCKET_STATIC=name
 STORAGE_PATH=127.0.0.1:8081/bucket/
 STORAGE_PROTOCOL=http:
 
-
-
-# Celery configs
+# Didox configs
+DIDOX_PARTNER_TOKEN=...

.github/workflows/deploy.yaml

@@ -8,7 +8,6 @@ on:
 env:
   PROJECT_NAME: sifatbaho
 
-
 permissions:
   contents: write
 
@@ -48,6 +47,24 @@ jobs:
       - name: Copy env
         run: |
           cp .env.example .env
+          update_env() {
+            local env_file=".env"
+            for kv in "$@"; do
+              local key="${kv%%=*}"
+              local value="${kv#*=}"
+              if grep -q "^$key=" "$env_file"; then
+                sed -i "s|^$key=.*|$key=$value|" "$env_file"
+              else
+                echo "$key=$value" >> "$env_file"
+              fi
+            done
+          }
+
+          update_env \
+            "DB_HOST=postgres" \
+            "DB_NAME=sifatbahodb" \
+            "DB_PORT=5432" \
+            "DIDOX_PARTNER_TOKEN=${{ secrets.DIDOX_TOKEN }}"
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
@@ -95,7 +112,6 @@ jobs:
           sed -i "s|image: .*/${{ env.PROJECT_NAME }}:.*|image: ${{ secrets.DOCKER_USERNAME }}/${{ env.PROJECT_NAME }}:${{ github.run_number }}|g" stack.yaml
           sed -i 's/return HttpResponse("OK.*"/return HttpResponse("OK: #${{ github.sha }}"/' config/urls.py
 
-
       - name: Commit and push updated version
         run: |
           git config user.name "github-actions[bot]"
@@ -136,24 +152,5 @@ jobs:
             git reset --hard origin/main
 
             cp .env.example .env
-
-            update_env() {
-              local env_file=".env"
-              for kv in "$@"; do
-                local key="${kv%%=*}"
-                local value="${kv#*=}"
-                if grep -q "^$key=" "$env_file"; then
-                  sed -i "s|^$key=.*|$key=$value|" "$env_file"
-                else
-                  echo "$key=$value" >> "$env_file"
-                fi
-              done
-            }
-
-            update_env \
-              "DB_HOST=postgres" \
-              "DB_NAME=sifatbahodb" \
-              "DB_PORT=5432"
-
             export PORT=8085
             docker stack deploy -c stack.yaml ${{ env.PROJECT_NAME }} --with-registry-auth

config/asgi.py

@@ -1,12 +1,27 @@
-import os
-
-from django.core.asgi import get_asgi_application
-
-asgi_application = get_asgi_application()
-from config.env import env  # noqa
-
-os.environ.setdefault("DJANGO_SETTINGS_MODULE", env("DJANGO_SETTINGS_MODULE"))
-
-
-application = asgi_application
-
+import os
+
+from django.core.asgi import get_asgi_application
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "config.settings.local")
+
+asgi_application = get_asgi_application()
+
+from channels.routing import ProtocolTypeRouter, URLRouter  # noqa
+from django.urls import re_path  # noqa
+
+from core.apps.chat.consumers import ChatConsumer  # noqa
+from core.apps.chat.middlewares.auth import JWTAuthMiddlewareStack  # noqa
+
+websocket_urlpatterns = [
+    re_path(
+        r"^ws/chat/room/(?P<room_id>\d+)/$",
+        ChatConsumer.as_asgi(),
+    ),
+]
+
+application = ProtocolTypeRouter({
+    "http": asgi_application,
+    "websocket": JWTAuthMiddlewareStack(
+        URLRouter(websocket_urlpatterns)
+    ),
+})

config/conf/modules.py

@@ -1 +1 @@
-MODULES = ["core.apps.shared", "core.apps.evaluation", "core.apps.payment"]
+MODULES = ["core.apps.shared", "core.apps.evaluation", "core.apps.payment", "core.apps.chat"]

config/conf/navigation.py

@@ -112,6 +112,33 @@ PAGES = [
             },
         ],
     },
+    {
+        "title": _("Tarix"),
+        "separator": True,
+        "items": [
+            {
+                "title": _("Avto baholash tarixi"),
+                "icon": "history",
+                "link": reverse_lazy("admin:evaluation_autoevaluationhistorymodel_changelist"),
+            },
+            {
+                "title": _("Tezkor baholash tarixi"),
+                "icon": "manage_history",
+                "link": reverse_lazy("admin:evaluation_quickevaluationhistorymodel_changelist"),
+            },
+        ],
+    },
+    {
+        "title": _("Chat"),
+        "separator": True,
+        "items": [
+            {
+                "title": _("Chat xabarlari"),
+                "icon": "chat",
+                "link": reverse_lazy("admin:chat_chatmessagemodel_changelist"),
+            },
+        ],
+    },
     {
         "title": _("Ma'lumotnomalari"),
         "separator": True,
@@ -123,4 +150,41 @@ PAGES = [
             },
         ],
     },
+    {
+        "title": _("Auto baholash"),
+        "separator": True,
+        "items": [
+            {
+                "title": _("Hujjatlar"),
+                "icon": "attach_file",
+                "link": reverse_lazy("admin:evaluation_documentmodel_changelist"),
+            },
+            {
+                "title": _("Kategoriyalar"),
+                "icon": "category",
+                "link": reverse_lazy("admin:evaluation_documentcategorymodel_changelist"),
+            }
+        ]
+    },
+    {
+        "title": _("Joylashuvlar"),
+        "separator": True,
+        "items": [
+            {
+                "title": _("Shaharlar"),
+                "icon": "attach_file",
+                "link": reverse_lazy("admin:shared_regionmodel_changelist"),
+            },
+            {
+                "title": _("Tumanlar"),
+                "icon": "attach_file",
+                "link": reverse_lazy("admin:shared_districtmodel_changelist"),
+            },
+            {
+                "title": _("Mahallalar"),
+                "icon": "attach_file",
+                "link": reverse_lazy("admin:shared_villagemodel_changelist"),
+            },
+        ]
+    }
 ]

config/conf/rest_framework.py

@@ -1,7 +1,11 @@
 from typing import Any, Union
 
 REST_FRAMEWORK: Union[Any] = {
-    "DEFAULT_AUTHENTICATION_CLASSES": ("rest_framework_simplejwt.authentication.JWTAuthentication",),
+    "DEFAULT_AUTHENTICATION_CLASSES": (
+        "rest_framework_simplejwt.authentication.JWTAuthentication",
+        "rest_framework.authentication.SessionAuthentication",
+        # "rest_framework.authentication.BaseAuthentication",
+    ),
     "DEFAULT_SCHEMA_CLASS": "drf_spectacular.openapi.AutoSchema",
     "DEFAULT_PERMISSION_CLASSES": ["rest_framework.permissions.IsAuthenticated"],
     "DEFAULT_PAGINATION_CLASS": "django_core.paginations.CustomPagination",

config/env.py

@@ -9,7 +9,7 @@ import environ
 environ.Env.read_env(os.path.join(".env"))
 
 env = environ.Env(
-    DEBUG=(bool, False),
+    DEBUG=(bool, True),
     CACHE_TIME=(int, 180),
     OTP_EXPIRE_TIME=(int, 2),
     VITE_LIVE=(bool, False),
@@ -26,4 +26,5 @@ env = environ.Env(
     OTP_SERVICE="EskizService",
     PROJECT_ENV=(str, "prod"),
     SILK_ENABLED=(bool, False),
+    DIDOX_PARTNER_TOKEN=(str),
 )

config/settings/common.py

@@ -49,6 +49,7 @@ INSTALLED_APPS = [
     "django.contrib.sessions",
     "django.contrib.messages",
     "django.contrib.staticfiles",
+    "django.contrib.postgres",
 ] + APPS
 
 MODULES = [app for app in MODULES if isinstance(app, str)]
@@ -148,13 +149,25 @@ AUTH_USER_MODEL = "accounts.User"
 CELERY_BROKER_URL = env("REDIS_URL")
 CELERY_RESULT_BACKEND = env("REDIS_URL")
 
+CHANNEL_LAYERS = {
+    "default": {
+        "BACKEND": "channels_redis.core.RedisChannelLayer",
+        "CONFIG": {
+            "hosts": [env("REDIS_URL")],
+        },
+    },
+}
+
 ALLOWED_HOSTS += env("ALLOWED_HOSTS").split(",")
 CSRF_TRUSTED_ORIGINS = env("CSRF_TRUSTED_ORIGINS").split(",")
+SITE_URL = env.str("SITE_URL", default="http://localhost:8055")
 
 
 MODELTRANSLATION_LANGUAGES = ("uz", "ru", "en")
 MODELTRANSLATION_DEFAULT_LANGUAGE = "uz"
 
+DIDOX_PARTNER_TOKEN = env.str("DIDOX_PARTNER_TOKEN")
+
 
 
 JST_LANGUAGES = [

config/urls.py

@@ -13,7 +13,7 @@ from config.env import env
 
 
 def home(request):
-    return HttpResponse("OK: #7bcf7bdc7f8b10357921efee0415dc6211137338")
+    return HttpResponse("OK: #8b02f3a3a323de305d49ef7fd372b4495363e1c5")
 
 
 urlpatterns = [
@@ -22,6 +22,7 @@ urlpatterns = [
     path("api/", include("core.apps.shared.urls")),
     path("api/v1/", include("core.apps.evaluation.urls")),
     path("api/v1/", include("core.apps.payment.urls")),
+    path("api/v1/", include("core.apps.chat.urls")),
 ]
 urlpatterns += [
     path("admin/", admin.site.urls),

core/apps/accounts/admin/__init__.py

@@ -1,2 +1,3 @@
 from .core import *  # noqa
 from .user import *  # noqa
+from .permission import *

core/apps/accounts/admin/permission.py

@@ -0,0 +1,44 @@
+from django.contrib import admin
+from core.apps.accounts.models.permission import (
+    PermissionToAction,
+    PermissionToTab,
+    Permission,
+    Role,
+)
+
+
+@admin.register(PermissionToAction)
+class PermissionToActionAdmin(admin.ModelAdmin):
+    list_display = ("id", "name", "code", "created_at")
+    search_fields = ("name", "code")
+    list_filter = ("created_at",)
+    ordering = ("-id",)
+
+
+@admin.register(PermissionToTab)
+class PermissionToTabAdmin(admin.ModelAdmin):
+    list_display = ("id", "name", "code", "created_at")
+    search_fields = ("name", "code")
+    filter_horizontal = ("permission_to_actions",)
+    list_filter = ("created_at",)
+    ordering = ("-id",)
+
+
+@admin.register(Permission)
+class PermissionAdmin(admin.ModelAdmin):
+    list_display = ("id", "name", "code", "created_at")
+    search_fields = ("name", "code")
+    filter_horizontal = ("permission_tabs",)
+    list_filter = ("created_at",)
+    ordering = ("-id",)
+
+
+@admin.register(Role)
+class RoleAdmin(admin.ModelAdmin):
+    list_display = ("id", "name")
+    search_fields = ("name",)
+    filter_horizontal = (
+        "permissions",
+        "permission_to_tabs",
+        "permission_to_actions",
+    )

core/apps/accounts/admin/user.py

@@ -1,5 +1,7 @@
 from django.contrib.auth import admin
+from django.contrib.auth.admin import UserAdmin
 from django.utils.translation import gettext_lazy as _
+from django.utils.safestring import mark_safe
 from unfold.admin import ModelAdmin
 from unfold.forms import AdminPasswordChangeForm  # UserCreationForm,
 from unfold.forms import UserChangeForm
@@ -10,6 +12,7 @@ class CustomUserAdmin(admin.UserAdmin, ModelAdmin):
     # add_form = UserCreationForm
     form = UserChangeForm
     list_display = (
+        "display_avatar",
         "first_name",
         "last_name",
         "phone",
@@ -17,7 +20,7 @@ class CustomUserAdmin(admin.UserAdmin, ModelAdmin):
     )
     search_fields = ("phone", "first_name", "last_name", "username")
     autocomplete_fields = ["groups", "user_permissions"]
-    fieldsets = ((None, {"fields": ("phone",)}),) + (
+    fieldsets = ((None, {"fields": ("phone", "avatar",)}),) + (
         (None, {"fields": ("username", "password")}),
         (_("Personal info"), {"fields": ("first_name", "last_name", "email")}),
         (
@@ -36,6 +39,15 @@ class CustomUserAdmin(admin.UserAdmin, ModelAdmin):
         (_("Important dates"), {"fields": ("last_login", "date_joined")}),
     )
 
+    def display_avatar(self, obj):
+        if obj.avatar:
+            return mark_safe(
+                f'<img src="{obj.avatar.url}" width="35" height="35" style="border-radius: 50%; object-fit: cover;" />'
+            )
+        return _("No Image")
+
+    display_avatar.short_description = _("Avatar")
+
 
 class PermissionAdmin(ModelAdmin):
     list_display = ("name",)    

core/apps/accounts/migrations/0003_user_avatar.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.7 on 2026-03-17 12:32
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('accounts', '0002_alter_user_role'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='user',
+            name='avatar',
+            field=models.ImageField(blank=True, null=True, upload_to='avatars/'),
+        ),
+    ]

core/apps/accounts/migrations/0004_permissiontoaction_permissiontotab_permission_role_and_more.py

@@ -0,0 +1,78 @@
+# Generated by Django 5.2.7 on 2026-04-27 09:33
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('accounts', '0003_user_avatar'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='PermissionToAction',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('name', models.CharField(max_length=200)),
+                ('code', models.CharField(max_length=100, unique=True)),
+            ],
+            options={
+                'verbose_name': 'Harakatlar uchun ruxsatnoma',
+                'verbose_name_plural': 'Harakatlar uchun ruxsatnomalar',
+            },
+        ),
+        migrations.CreateModel(
+            name='PermissionToTab',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('name', models.CharField(max_length=200)),
+                ('code', models.CharField(max_length=100, unique=True)),
+                ('permission_to_actions', models.ManyToManyField(related_name='permission_to_tabs', to='accounts.permissiontoaction')),
+            ],
+            options={
+                'verbose_name': "Bo'lim uchun ruxsatnoma",
+                'verbose_name_plural': "Bo'lim uchun ruxsatnomalar",
+            },
+        ),
+        migrations.CreateModel(
+            name='Permission',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('name', models.CharField(max_length=200)),
+                ('code', models.CharField(max_length=100, unique=True)),
+                ('permission_tab', models.ManyToManyField(related_name='permissions', to='accounts.permissiontotab')),
+            ],
+            options={
+                'verbose_name': 'Sahifa uchun ruxsatnoma',
+                'verbose_name_plural': 'Sahifa uchun ruxsatnomalar',
+            },
+        ),
+        migrations.CreateModel(
+            name='Role',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('name', models.CharField(max_length=200, unique=True)),
+                ('comment', models.CharField(blank=True, max_length=200, null=True)),
+                ('permission_to_actions', models.ManyToManyField(blank=True, related_name='roles', to='accounts.permissiontoaction')),
+                ('permission_to_tabs', models.ManyToManyField(blank=True, related_name='roles', to='accounts.permissiontotab')),
+                ('permissions', models.ManyToManyField(blank=True, related_name='roles', to='accounts.permission')),
+            ],
+            options={
+                'verbose_name': 'Rol',
+                'verbose_name_plural': 'Rollar',
+            },
+        ),
+        migrations.AddField(
+            model_name='user',
+            name='permission',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='users', to='accounts.role'),
+        ),
+    ]

core/apps/accounts/migrations/0005_rename_permission_tab_permission_permission_tabs.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.7 on 2026-04-28 11:02
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('accounts', '0004_permissiontoaction_permissiontotab_permission_role_and_more'),
+    ]
+
+    operations = [
+        migrations.RenameField(
+            model_name='permission',
+            old_name='permission_tab',
+            new_name='permission_tabs',
+        ),
+    ]

core/apps/accounts/models/permission.py

@@ -0,0 +1,60 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+from django_core.models import AbstractBaseModel
+
+
+class PermissionToAction(AbstractBaseModel):
+    name = models.CharField(max_length=200)
+    code = models.CharField(max_length=100, unique=True)
+
+    def __str__(self):
+        return f"{self.name} - {self.code}"
+
+    class Meta:
+        verbose_name = _('Harakatlar uchun ruxsatnoma')
+        verbose_name_plural = _('Harakatlar uchun ruxsatnomalar')
+
+
+class PermissionToTab(AbstractBaseModel):
+    name = models.CharField(max_length=200)
+    code = models.CharField(max_length=100, unique=True)
+    permission_to_actions = models.ManyToManyField(
+        PermissionToAction, related_name='permission_to_tabs'
+    )
+
+    def __str__(self):
+        return f'{self.name} - {self.code}'
+
+    class Meta:
+        verbose_name = _("Bo'lim uchun ruxsatnoma")
+        verbose_name_plural = _("Bo'lim uchun ruxsatnomalar")
+
+
+class Permission(AbstractBaseModel):
+    name = models.CharField(max_length=200)
+    code = models.CharField(max_length=100, unique=True)
+    permission_tabs = models.ManyToManyField(PermissionToTab, related_name='permissions')
+
+    def __str__(self):
+        return f'{self.name} - {self.code}'
+
+    class Meta:
+        verbose_name = _('Sahifa uchun ruxsatnoma')
+        verbose_name_plural = _('Sahifa uchun ruxsatnomalar')
+
+class Role(models.Model):
+    name = models.CharField(max_length=200, unique=True)
+    permissions = models.ManyToManyField(Permission, related_name='roles', blank=True)
+    permission_to_tabs = models.ManyToManyField(PermissionToTab, related_name='roles', blank=True)
+    permission_to_actions = models.ManyToManyField(
+        PermissionToAction, related_name='roles', blank=True
+    )
+    comment = models.CharField(max_length=200, null=True, blank=True)
+
+    def __str__(self):
+        return self.name
+
+    class Meta:
+        verbose_name = _('Rol')
+        verbose_name_plural = _('Rollar')
+

core/apps/accounts/models/user.py

@@ -1,6 +1,7 @@
 from django.contrib.auth import models as auth_models
 from django.db import models
 
+from .permission import Role
 from ..choices import RoleChoice
 from ..managers import UserManager
 
@@ -16,6 +17,8 @@ class User(auth_models.AbstractUser):
         choices=RoleChoice,
         default=RoleChoice.USER,
     )
+    avatar = models.ImageField(upload_to="avatars/", null=True, blank=True)
+    permission = models.ForeignKey(Role, on_delete=models.SET_NULL, null=True, blank=True, related_name='users')
 
     USERNAME_FIELD = "phone"
     objects = UserManager()

core/apps/accounts/serializers/permission.py

@@ -0,0 +1,37 @@
+from rest_framework import serializers
+
+from core.apps.accounts.models.permission import PermissionToAction, PermissionToTab, Permission, Role
+
+
+class PermissionToActionSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = PermissionToAction
+        fields = ['id', 'name']
+
+
+class PermissionToTabSerializer(serializers.ModelSerializer):
+    permission_to_actions = PermissionToActionSerializer(many=True)
+
+    class Meta:
+        model = PermissionToTab
+        fields = ['id', 'name', 'permission_to_actions']
+
+
+class PermissionSerializer(serializers.ModelSerializer):
+    permission_tabs = PermissionToTabSerializer(many=True)
+
+    class Meta:
+        model = Permission
+        fields = ['id', 'name', 'permission_tabs']
+
+
+class RoleListSerializer(serializers.ModelSerializer):
+    permissions = PermissionSerializer(many=True)
+    permission_to_tabs = PermissionToTabSerializer(many=True)
+    permission_to_actions = PermissionToActionSerializer(many=True)
+
+    class Meta:
+        model = Role
+        fields = [
+            'id', 'name', 'comment', 'permissions', 'permission_to_tabs', 'permission_to_actions',
+        ]

core/apps/accounts/serializers/user.py

@@ -3,21 +3,55 @@ from rest_framework import serializers
 
 
 class UserSerializer(serializers.ModelSerializer):
+    avatar = serializers.SerializerMethodField(method_name='get_avatar')
+
     class Meta:
         exclude = [
             "created_at",
             "updated_at",
             "password",
             "groups",
-            "user_permissions"
+            "user_permissions",
         ]
         model = get_user_model()
 
+    def get_avatar(self, obj):
+        request = self.context.get('request')
+        if obj.avatar:
+            return request.build_absolute_uri(obj.avatar.url)
+        return None
+
 
 class UserUpdateSerializer(serializers.ModelSerializer):
     class Meta:
         model = get_user_model()
         fields = [
             "first_name",
-            "last_name"
+            "last_name",
+            "avatar"
         ]
+
+class AdminUserSerializer(serializers.ModelSerializer):
+    avatar = serializers.SerializerMethodField(method_name='get_avatar')
+
+    class Meta:
+        model = get_user_model()
+        fields = "__all__"
+
+    def get_avatar(self, obj):
+        request = self.context.get('request')
+        if obj.avatar:
+            return request.build_absolute_uri(obj.avatar.url)
+        return None
+
+
+
+class UserCreateSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = get_user_model()
+        fields = [
+            "phone",
+            "first_name",
+            "last_name",
+            "password",
+            "role"]

core/apps/accounts/urls.py

@@ -4,23 +4,33 @@ Accounts app urls
 
 from django.urls import path, include
 from rest_framework_simplejwt import views as jwt_views
-from .views import RegisterView, ResetPasswordView, MeView, ChangePasswordView
+from .views import RegisterView, ResetPasswordView, MeView, ChangePasswordView, UserListApiView, AdminUserListApiView, \
+    AdminUserView, AdminCreateAPIView, AdminUpdateAPIView
 from rest_framework.routers import DefaultRouter
 
+from .views.permission import PermissionToActionViewSet, PermissionToTabViewSet, PermissionViewSet, RoleViewSet
+from core.apps.accounts.views.user import DeleteAdminUserApiView
+
 router = DefaultRouter()
 router.register("auth", RegisterView, basename="auth")
 router.register("auth", ResetPasswordView, basename="reset-password")
 router.register("auth", MeView, basename="me")
 router.register("auth", ChangePasswordView, basename="change-password")
+router.register("user", AdminUserView, basename="user-crud")
+router.register("action", PermissionToActionViewSet, basename="action")
+router.register("permission-to-tab", PermissionToTabViewSet, basename="permission-to-tab")
+router.register("permission", PermissionViewSet, basename="permission")
+router.register("permission-role", RoleViewSet, basename="permission-role")
 
 
 urlpatterns = [
     path("", include(router.urls)),
     path("auth/token/", jwt_views.TokenObtainPairView.as_view(), name="token_obtain_pair"),
     path("auth/token/verify/", jwt_views.TokenVerifyView.as_view(), name="token_verify"),
-    path(
-        "auth/token/refresh/",
-        jwt_views.TokenRefreshView.as_view(),
-        name="token_refresh",
-    ),
+    path("auth/token/refresh/",jwt_views.TokenRefreshView.as_view()),
+    path("user/list/", UserListApiView.as_view(), name="user-list"),
+    path("admin-user/list/", AdminUserListApiView.as_view(), name="admin-user-list"),
+    path("admin/create/", AdminCreateAPIView.as_view(), name="user-create"),
+    path("admin/update/<int:pk>/", AdminUpdateAPIView.as_view(), name="user-update"),
+    path('user/admin/<int:pk>/delete/', DeleteAdminUserApiView.as_view(), name='user-delete')
 ]

core/apps/accounts/views/__init__.py

@@ -1 +1,2 @@
 from .auth import *  # noqa
+from .user import *  # noqa

core/apps/accounts/views/auth.py

@@ -6,7 +6,7 @@ from django.contrib.auth import get_user_model
 from django.utils.translation import gettext_lazy as _
 from django_core import exceptions
 from drf_spectacular.utils import extend_schema
-from rest_framework import status, throttling, request
+from rest_framework import status, throttling, request, parsers
 from rest_framework.response import Response
 from rest_framework.exceptions import PermissionDenied
 from rest_framework.viewsets import GenericViewSet
@@ -160,6 +160,11 @@ class ResetPasswordView(BaseViewSetMixin, GenericViewSet, UserService):
 @extend_schema(tags=["me"])
 class MeView(BaseViewSetMixin, GenericViewSet, UserService):
     permission_classes = [IsAuthenticated]
+    parser_classes = (
+        parsers.MultiPartParser,
+        parsers.FormParser,
+        parsers.JSONParser,
+    )
 
     def get_serializer_class(self):
         match self.action:
@@ -172,14 +177,14 @@ class MeView(BaseViewSetMixin, GenericViewSet, UserService):
 
     @action(methods=["GET", "OPTIONS"], detail=False, url_path="me")
     def me(self, request):
-        return Response(self.get_serializer(request.user).data)
+        return Response(UserSerializer(request.user, context={"request": request}).data)
 
     @action(methods=["PATCH", "PUT"], detail=False, url_path="user-update")
     def user_update(self, request):
-        ser = self.get_serializer(instance=request.user, data=request.data, partial=True)
+        ser = self.get_serializer(instance=request.user, data=request.data, partial=True, context={"request": request})
         ser.is_valid(raise_exception=True)
-        ser.save()
-        return Response({"detail": _("Malumotlar yangilandi")})
+        data = ser.save()
+        return Response(UserSerializer(data).data)
 
 
 @extend_schema(tags=["change-password"], description="Parolni o'zgartirish uchun")

core/apps/accounts/views/permission.py

@@ -0,0 +1,41 @@
+from django_core.mixins import BaseViewSetMixin
+from drf_spectacular.utils import extend_schema
+from rest_framework.permissions import AllowAny, IsAdminUser
+from rest_framework.viewsets import ModelViewSet
+
+from core.apps.accounts.models.permission import PermissionToAction, PermissionToTab, Permission, Role
+from core.apps.accounts.serializers.permission import PermissionToActionSerializer, PermissionToTabSerializer, \
+    PermissionSerializer, RoleListSerializer
+
+
+@extend_schema(tags=["permission"])
+class PermissionToActionViewSet(BaseViewSetMixin, ModelViewSet):
+    queryset = PermissionToAction.objects.all()
+    serializer_class = PermissionToActionSerializer
+
+    action_serializer_class = {
+        'create': PermissionToActionSerializer,
+        'update': PermissionToActionSerializer,
+    }
+
+    action_permission_classes = {
+        'create': [AllowAny],
+        'destroy': [IsAdminUser],
+    }
+
+
+@extend_schema(tags=["permission"])
+class PermissionToTabViewSet(BaseViewSetMixin, ModelViewSet):
+    queryset = PermissionToTab.objects.all()
+    serializer_class = PermissionToTabSerializer
+
+
+@extend_schema(tags=["permission"])
+class PermissionViewSet(BaseViewSetMixin, ModelViewSet):
+    queryset = Permission.objects.all()
+    serializer_class = PermissionSerializer
+
+
+class RoleViewSet(BaseViewSetMixin, ModelViewSet):
+    queryset = Role.objects.all()
+    serializer_class = RoleListSerializer

core/apps/accounts/views/user.py

@@ -0,0 +1,97 @@
+from django.contrib.auth import get_user_model
+from django.shortcuts import get_object_or_404
+from django_core.mixins import BaseViewSetMixin
+from drf_spectacular.utils import extend_schema
+from rest_framework import generics, filters
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+from rest_framework.views import APIView
+from rest_framework.viewsets import ModelViewSet
+
+from core.apps.accounts.choices.user import RoleChoice
+from core.apps.accounts.serializers.user import UserSerializer, AdminUserSerializer, UserCreateSerializer
+
+User = get_user_model()
+
+
+@extend_schema(tags=['User'])
+class UserListApiView(generics.ListAPIView):
+    queryset = User.objects.filter(role=RoleChoice.USER)
+    serializer_class = UserSerializer
+    permission_classes = [IsAuthenticated]
+    filter_backends = [filters.SearchFilter]
+    search_fields = ['phone', 'first_name', 'last_name']
+
+    def serializer_context(self):
+        return self.serializer_class(context={"request": self.request})
+
+
+@extend_schema(tags=['User'])
+class AdminUserListApiView(generics.ListAPIView):
+    queryset = User.objects.exclude(role=RoleChoice.USER)
+    serializer_class = UserSerializer
+    permission_classes = [IsAuthenticated]
+    filter_backends = [filters.SearchFilter]
+    search_fields = ['phone', 'first_name', 'last_name']
+
+
+@extend_schema(tags=["User"], request=AdminUserSerializer)
+class AdminUserView(BaseViewSetMixin, ModelViewSet):
+    queryset = User.objects.filter(role=RoleChoice.USER)
+    serializer_class = AdminUserSerializer
+    permission_classes = [IsAuthenticated]
+    filter_backends = [filters.SearchFilter]
+    search_fields = ['phone', 'first_name', 'last_name']
+
+    def serializer_context(self):
+        return self.serializer_class(context={"request": self.request})
+
+
+@extend_schema(tags=['User'],
+               responses={200: UserSerializer},
+               request=UserCreateSerializer)
+class AdminCreateAPIView(APIView):
+    permission_classes = [IsAuthenticated]
+
+    def post(self, request):
+        if request.user.role not in (RoleChoice.SUPERUSER, RoleChoice.ADMIN):
+            return Response({'detail': 'Forbidden'}, status=403)
+
+        serializer = UserCreateSerializer(data=request.data)
+        serializer.is_valid(raise_exception=True)
+        serializer.save()
+
+        return Response(serializer.data, status=201)
+
+
+@extend_schema(tags=['User'],)
+class AdminUpdateAPIView(generics.GenericAPIView):
+    permission_classes = [IsAuthenticated]
+    serializer_class = UserCreateSerializer
+
+    def put(self, request, pk):
+        if request.user.role not in (RoleChoice.SUPERUSER, RoleChoice.ADMIN):
+            return Response({'detail': 'Forbidden'}, status=403)
+
+        user = get_object_or_404(User, pk=pk)
+        serializer = UserCreateSerializer(user, data=request.data)
+        serializer.is_valid(raise_exception=True)
+        serializer.save()
+
+        return Response(serializer.data, status=200)
+
+
+class DeleteAdminUserApiView(APIView):
+    permission_classes = [IsAuthenticated]
+
+    def delete(self, request, pk):
+        if request.user.role != RoleChoice.SUPERUSER:
+            return Response({'detail': 'Forbidden'}, status=403)
+
+
+        user = get_object_or_404(User, pk=pk)
+        if user.role != RoleChoice.ADMIN:
+            return Response({'detail': 'This user is not an admin'}, status=400)
+        user.delete()
+
+        return Response(status=204)

core/apps/chat/admin/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/admin/chat.py

@@ -0,0 +1,86 @@
+from django.contrib import admin
+from django.utils.translation import gettext_lazy as _
+from unfold.admin import ModelAdmin
+
+from core.apps.chat.models import ChatmessageModel, ChatroomModel
+
+
+@admin.register(ChatmessageModel)
+class ChatmessageAdmin(ModelAdmin):
+    list_display = (
+        "id",
+        "room",
+        "message_type",
+        "sender",
+        "short_text",
+        "is_read",
+        "created_at",
+    )
+    list_filter = ("message_type", "is_read", "created_at")
+    search_fields = (
+        "text",
+        "sender__phone",
+        "sender__first_name",
+        "sender__last_name",
+    )
+    readonly_fields = ("created_at",)
+    autocomplete_fields = ("sender",)
+    ordering = ("-created_at",)
+    fieldsets = (
+        (
+            _("Xabar"),
+            {
+                "fields": ("room", "sender", "message_type", "text", "file", "is_read"),
+            },
+        ),
+        (
+            _("Tizim"),
+            {
+                "classes": ("collapse",),
+                "fields": ("created_at",),
+            },
+        ),
+    )
+
+    def has_add_permission(self, request):
+        return False
+
+    def has_change_permission(self, request, obj=None):
+        return False
+
+    @admin.display(description=_("Xabar"))
+    def short_text(self, obj):
+        if not obj.text:
+            return f"[{obj.message_type}]"
+        return obj.text[:60] + "..." if len(obj.text) > 60 else obj.text
+
+
+@admin.register(ChatroomModel)
+class ChatroomAdmin(ModelAdmin):
+    list_display = (
+        "id",
+        "__str__",
+        "type",
+        "auto_evaluation",
+        "created_at",
+    )
+    list_filter = ("type",)
+    search_fields = ("auto_evaluation__id",)
+    autocomplete_fields = ("auto_evaluation",)
+    filter_horizontal = ("members",)
+    readonly_fields = ("created_at", "updated_at")
+    fieldsets = (
+        (
+            _("Xona"),
+            {
+                "fields": ("type", "auto_evaluation", "members"),
+            },
+        ),
+        (
+            _("Tizim"),
+            {
+                "classes": ("collapse",),
+                "fields": ("created_at", "updated_at"),
+            },
+        ),
+    )

core/apps/chat/apps.py

@@ -0,0 +1,9 @@
+from django.apps import AppConfig
+
+
+class ModuleConfig(AppConfig):
+    default_auto_field = "django.db.models.BigAutoField"
+    name = "core.apps.chat"
+
+    def ready(self):
+        import core.apps.chat.signals  # noqa

core/apps/chat/choices/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/choices/chat.py

@@ -0,0 +1,15 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+
+class RoomType(models.TextChoices):
+    AUTO_EVALUATION = "auto_evaluation", _("AutoEvaluation xonasi")
+    DIRECT = "direct", _("To'g'ridan-to'g'ri")
+
+
+class MessageType(models.TextChoices):
+    TEXT = "text", _("Matn")
+    IMAGE = "image", _("Rasm")
+    VIDEO = "video", _("Video")
+    VOICE = "voice", _("Ovoz")
+    FILE = "file", _("Fayl")

core/apps/chat/consumers/__init__.py

@@ -0,0 +1 @@
+from .chat import ChatConsumer  # noqa

core/apps/chat/consumers/chat.py

@@ -0,0 +1,115 @@
+import json
+
+from channels.db import database_sync_to_async
+from channels.generic.websocket import AsyncWebsocketConsumer
+from django.contrib.auth.models import AnonymousUser
+
+def get_base_url(scope):
+    headers = dict(scope["headers"])
+    host = headers.get(b"host", b"").decode()
+    scheme = "https" if scope.get("scheme") == "https" else "http"
+    return f"{scheme}://{host}"
+
+class ChatConsumer(AsyncWebsocketConsumer):
+    """
+    Xona asosidagi chat consumer.
+    Ulanish: ws://host/ws/chat/room/{room_id}/?token=<jwt>
+
+    Matn xabari yuborish:
+        { "message_type": "text", "text": "Salom" }
+
+    Fayl xabari (oldin REST orqali yuklab, keyin URL yuborish):
+        { "message_type": "image", "file_url": "https://...", "text": "caption (ixtiyoriy)" }
+    """
+
+    async def connect(self):
+        user = self.scope.get("user")
+        if not user or isinstance(user, AnonymousUser):
+            await self.close(code=4001)
+            return
+
+        self.room_id = self.scope["url_route"]["kwargs"]["room_id"]
+        self.room_group = f"chat_room_{self.room_id}"
+
+        await self.channel_layer.group_add(self.room_group, self.channel_name)
+        await self.accept()
+
+    async def disconnect(self, close_code):
+        if hasattr(self, "room_group"):
+            await self.channel_layer.group_discard(self.room_group, self.channel_name)
+
+    async def receive(self, text_data):
+        user = self.scope.get("user")
+        if not user or isinstance(user, AnonymousUser):
+            await self.close(code=401)
+            return
+
+        try:
+            data = json.loads(text_data)
+        except (json.JSONDecodeError, ValueError):
+            await self.send(text_data=json.dumps({"error": "Noto'g'ri format."}))
+            return
+
+        message_type = data.get("message_type", "text")
+        text = (data.get("text") or "").strip()
+
+        if message_type == "text" and not text:
+            await self.send(text_data=json.dumps({"error": "Matn bo'sh bo'lishi mumkin emas."}))
+            return
+
+        if message_type != "text":
+            await self.send(
+                text_data=json.dumps(
+                    {"error": "Fayl xabarlarni yuklash uchun REST API dan foydalaning."}
+                )
+            )
+            return
+
+        await self._save_message(user, text)
+
+   
+    async def chat_message(self, event):
+        await self.send(
+            text_data=json.dumps(
+                {
+                    "id": event["id"],
+                    "message_type": event["message_type"],
+                    "text": event["text"],
+                    "file_url": event["file_url"],
+                    "sender": event["sender"],
+                    "created_at": event["created_at"],
+                }
+            )
+        )
+
+    @database_sync_to_async
+    def _save_message(self, user, text):
+        from core.apps.chat.models import ChatmessageModel
+
+        msg = ChatmessageModel.objects.create(
+            room_id=self.room_id,
+            sender=user,
+            message_type="text",
+            text=text,
+        )
+        full_name = user.get_full_name().strip() or str(user.phone)
+        base_url = get_base_url(self.scope)
+
+        avatar_url = (
+            base_url + user.avatar.url
+            if user.avatar else None
+        )
+        return {
+            "id": msg.id,
+            "message_type": msg.message_type,
+            "text": msg.text,
+            "file_url": None,
+            "sender": {
+                "id": user.id,
+                "full_name": full_name,
+                "role": user.role,
+                "phone": user.phone,
+                "avatar": avatar_url,
+            },
+            "created_at": msg.created_at.isoformat(),
+        }

core/apps/chat/filters/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/filters/chat.py

@@ -0,0 +1,33 @@
+from django_filters import rest_framework as filters
+
+from core.apps.chat.models import ChatmessageModel, ChatroomModel
+
+
+class ChatmessageFilter(filters.FilterSet):
+    room = filters.NumberFilter(field_name="room_id", lookup_expr="exact")
+    message_type = filters.CharFilter(field_name="message_type", lookup_expr="exact")
+    is_read = filters.BooleanFilter(field_name="is_read")
+    created_from = filters.DateTimeFilter(field_name="created_at", lookup_expr="gte")
+    created_to = filters.DateTimeFilter(field_name="created_at", lookup_expr="lte")
+
+    class Meta:
+        model = ChatmessageModel
+        fields = [
+            "room",
+            "message_type",
+            "is_read",
+            "created_from",
+            "created_to",
+        ]
+
+
+class ChatroomFilter(filters.FilterSet):
+    type = filters.CharFilter(field_name="type", lookup_expr="exact")
+    auto_evaluation = filters.NumberFilter(field_name="auto_evaluation_id", lookup_expr="exact")
+
+    class Meta:
+        model = ChatroomModel
+        fields = [
+            "type",
+            "auto_evaluation",
+        ]

core/apps/chat/forms/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/forms/chat.py

@@ -0,0 +1,17 @@
+from django import forms
+
+from core.apps.chat.models import ChatmessageModel, ChatroomModel
+
+
+class ChatmessageForm(forms.ModelForm):
+
+    class Meta:
+        model = ChatmessageModel
+        fields = "__all__"
+
+
+class ChatroomForm(forms.ModelForm):
+
+    class Meta:
+        model = ChatroomModel
+        fields = "__all__"

core/apps/chat/middlewares/__init__.py

@@ -0,0 +1 @@
+from .auth import * # noqa

core/apps/chat/middlewares/auth.py

@@ -0,0 +1,70 @@
+import traceback
+from urllib.parse import parse_qs
+
+from channels.auth import AuthMiddlewareStack
+from channels.db import database_sync_to_async
+from django.conf import settings
+from django.contrib.auth import get_user_model
+from django.contrib.auth.models import AnonymousUser
+from django.db import close_old_connections
+from jwt import DecodeError, ExpiredSignatureError, InvalidSignatureError
+from jwt import decode as jwt_decode
+
+User = get_user_model()
+
+
+class JWTAuthMiddleware:
+    def __init__(self, app):
+        self.app = app
+
+    async def __call__(self, scope, receive, send):
+        close_old_connections()
+        try:
+            if jwt_token_list := parse_qs(scope["query_string"].decode("utf8")).get(
+                "token", None
+            ):
+                jwt_token = jwt_token_list[0]
+                jwt_payload = self.get_payload(jwt_token)
+                user_credentials = self.get_user_credentials(jwt_payload)
+                user = await self.get_logged_in_user(user_credentials)
+                scope["user"] = user
+            else:
+                scope["user"] = AnonymousUser()
+        except (
+            InvalidSignatureError,
+            KeyError,
+            ExpiredSignatureError,
+            DecodeError,
+        ):
+            traceback.print_exc()
+        except Exception as e:
+            print(e)
+            scope["user"] = AnonymousUser()
+        return await self.app(scope, receive, send)
+
+    def get_payload(self, jwt_token):
+        payload = jwt_decode(jwt_token, settings.SECRET_KEY, algorithms=["HS256"])
+        return payload
+
+    def get_user_credentials(self, payload):
+        """
+        method to get user credentials from jwt token payload.
+        defaults to user id.
+        """
+        user_id = payload["user_id"]
+        return user_id
+
+    async def get_logged_in_user(self, user_id):
+        user = await self.get_user(user_id)
+        return user
+
+    @database_sync_to_async
+    def get_user(self, user_id):
+        try:
+            return User.objects.get(id=user_id)
+        except User.DoesNotExist:
+            return AnonymousUser()
+
+
+def JWTAuthMiddlewareStack(app):
+    return JWTAuthMiddleware(AuthMiddlewareStack(app))

core/apps/chat/migrations/0001_initial_chat_message.py

@@ -0,0 +1,36 @@
+# Generated by Django 5.2.7 on 2026-04-02 14:22
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('evaluation', '0026_alter_autoevaluationmodel_form_ownership_and_more'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='ChatmessageModel',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('text', models.TextField(verbose_name='text')),
+                ('is_read', models.BooleanField(db_index=True, default=False, verbose_name='is read')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='created at')),
+                ('auto_evaluation', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='chat_messages', to='evaluation.autoevaluationmodel', verbose_name='auto evaluation')),
+                ('sender', models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='chat_messages', to=settings.AUTH_USER_MODEL, verbose_name='sender')),
+            ],
+            options={
+                'verbose_name': 'Chat Message',
+                'verbose_name_plural': 'Chat Messages',
+                'db_table': 'ChatMessage',
+                'ordering': ['created_at'],
+                'indexes': [models.Index(fields=['auto_evaluation_id', 'created_at'], name='chat_eval_date_idx'), models.Index(fields=['auto_evaluation_id', 'is_read'], name='chat_eval_read_idx')],
+            },
+        ),
+    ]

core/apps/chat/migrations/0002_chatroom_and_message_media.py

@@ -0,0 +1,152 @@
+from django.conf import settings
+from django.db import migrations, models
+import django.db.models.deletion
+import core.apps.chat.models.chat
+
+
+def delete_old_messages(apps, schema_editor):
+    """Eski xabarlarni o'chirish — room FK bilan mos kelmaydi."""
+    ChatmessageModel = apps.get_model("chat", "ChatmessageModel")
+    ChatmessageModel.objects.all().delete()
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("chat", "0001_initial_chat_message"),
+        ("evaluation", "0026_alter_autoevaluationmodel_form_ownership_and_more"),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        # 1. ChatroomModel yaratish
+        migrations.CreateModel(
+            name="ChatroomModel",
+            fields=[
+                ("id", models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name="ID")),
+                ("created_at", models.DateTimeField(auto_now_add=True)),
+                ("updated_at", models.DateTimeField(auto_now=True)),
+                (
+                    "type",
+                    models.CharField(
+                        choices=[
+                            ("auto_evaluation", "AutoEvaluation xonasi"),
+                            ("direct", "To\u2018g\u2018ridan-to\u2018g\u2018ri"),
+                        ],
+                        db_index=True,
+                        default="auto_evaluation",
+                        max_length=20,
+                        verbose_name="type",
+                    ),
+                ),
+                (
+                    "auto_evaluation",
+                    models.OneToOneField(
+                        blank=True,
+                        null=True,
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="chat_room",
+                        to="evaluation.autoevaluationmodel",
+                        verbose_name="auto evaluation",
+                    ),
+                ),
+                (
+                    "members",
+                    models.ManyToManyField(
+                        blank=True,
+                        related_name="chat_rooms",
+                        to=settings.AUTH_USER_MODEL,
+                        verbose_name="members",
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "Chat Xona",
+                "verbose_name_plural": "Chat Xonalar",
+                "db_table": "ChatRoom",
+            },
+        ),
+        # 2. Eski xabarlarni o'chirish (room FKsiz migratsiya mumkin emas)
+        migrations.RunPython(delete_old_messages, migrations.RunPython.noop),
+        # 3. Eski indexlarni o'chirish
+        migrations.RemoveIndex(
+            model_name="chatmessagemodel",
+            name="chat_eval_date_idx",
+        ),
+        migrations.RemoveIndex(
+            model_name="chatmessagemodel",
+            name="chat_eval_read_idx",
+        ),
+        # 4. auto_evaluation FK o'chirish
+        migrations.RemoveField(
+            model_name="chatmessagemodel",
+            name="auto_evaluation",
+        ),
+        # 5. room FK qo'shish
+        migrations.AddField(
+            model_name="chatmessagemodel",
+            name="room",
+            field=models.ForeignKey(
+                on_delete=django.db.models.deletion.CASCADE,
+                related_name="messages",
+                to="chat.chatroommodel",
+                verbose_name="room",
+                null=True,
+            ),
+        ),
+        # 6. room ni non-null qilish
+        migrations.AlterField(
+            model_name="chatmessagemodel",
+            name="room",
+            field=models.ForeignKey(
+                on_delete=django.db.models.deletion.CASCADE,
+                related_name="messages",
+                to="chat.chatroommodel",
+                verbose_name="room",
+            ),
+        ),
+        # 7. message_type qo'shish
+        migrations.AddField(
+            model_name="chatmessagemodel",
+            name="message_type",
+            field=models.CharField(
+                choices=[
+                    ("text", "Matn"),
+                    ("image", "Rasm"),
+                    ("video", "Video"),
+                    ("voice", "Ovoz"),
+                    ("file", "Fayl"),
+                ],
+                db_index=True,
+                default="text",
+                max_length=10,
+                verbose_name="message type",
+            ),
+        ),
+        # 8. text ni nullable qilish
+        migrations.AlterField(
+            model_name="chatmessagemodel",
+            name="text",
+            field=models.TextField(blank=True, null=True, verbose_name="text"),
+        ),
+        # 9. file field qo'shish
+        migrations.AddField(
+            model_name="chatmessagemodel",
+            name="file",
+            field=models.FileField(
+                blank=True,
+                null=True,
+                upload_to=core.apps.chat.models.chat.chat_file_upload_path,
+                verbose_name="file",
+            ),
+        ),
+        # 10. Yangi indexlar
+        migrations.AddIndex(
+            model_name="chatmessagemodel",
+            index=models.Index(fields=["room_id", "created_at"], name="chat_room_date_idx"),
+        ),
+        migrations.AddIndex(
+            model_name="chatmessagemodel",
+            index=models.Index(fields=["room_id", "is_read"], name="chat_room_read_idx"),
+        ),
+    ]

core/apps/chat/migrations/0003_alter_chatmessagemodel_options_and_more.py

@@ -0,0 +1,22 @@
+# Generated by Django 5.2.7 on 2026-04-03 10:58
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('chat', '0002_chatroom_and_message_media'),
+    ]
+
+    operations = [
+        migrations.AlterModelOptions(
+            name='chatmessagemodel',
+            options={'ordering': ['created_at'], 'verbose_name': 'Chat Xabar', 'verbose_name_plural': 'Chat Xabarlar'},
+        ),
+        migrations.AlterField(
+            model_name='chatroommodel',
+            name='type',
+            field=models.CharField(choices=[('auto_evaluation', 'AutoEvaluation xonasi'), ('direct', "To'g'ridan-to'g'ri")], db_index=True, default='auto_evaluation', max_length=20, verbose_name='type'),
+        ),
+    ]

core/apps/chat/models/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/models/chat.py

@@ -0,0 +1,110 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+from django_core.models import AbstractBaseModel
+from model_bakery import baker
+
+from core.apps.chat.choices.chat import MessageType, RoomType
+
+
+def chat_file_upload_path(instance, filename):
+    return f"chat/{instance.message_type}/{filename}"
+
+
+class ChatroomModel(AbstractBaseModel):
+    type = models.CharField(
+        verbose_name=_("type"),
+        max_length=20,
+        choices=RoomType.choices,
+        default=RoomType.AUTO_EVALUATION,
+        db_index=True,
+    )
+    auto_evaluation = models.OneToOneField(
+        "evaluation.AutoEvaluationModel",
+        on_delete=models.CASCADE,
+        null=True,
+        blank=True,
+        related_name="chat_room",
+        verbose_name=_("auto evaluation"),
+    )
+    members = models.ManyToManyField(
+        "accounts.User",
+        blank=True,
+        related_name="chat_rooms",
+        verbose_name=_("members"),
+    )
+
+    def __str__(self):
+        if self.type == RoomType.AUTO_EVALUATION and self.auto_evaluation_id:
+            return f"AutoEval #{self.auto_evaluation_id} xonasi"
+        return f"Direct xona #{self.pk}"
+
+    @classmethod
+    def _baker(cls):
+        return baker.make(cls)
+
+    class Meta:
+        db_table = "ChatRoom"
+        verbose_name = _("Chat Xona")
+        verbose_name_plural = _("Chat Xonalar")
+
+
+class ChatmessageModel(models.Model):
+    room = models.ForeignKey(
+        ChatroomModel,
+        on_delete=models.CASCADE,
+        related_name="messages",
+        verbose_name=_("room"),
+    )
+    sender = models.ForeignKey(
+        "accounts.User",
+        on_delete=models.SET_NULL,
+        null=True,
+        related_name="chat_messages",
+        verbose_name=_("sender"),
+    )
+    message_type = models.CharField(
+        verbose_name=_("message type"),
+        max_length=10,
+        choices=MessageType.choices,
+        default=MessageType.TEXT,
+        db_index=True,
+    )
+    text = models.TextField(verbose_name=_("text"), null=True, blank=True)
+    file = models.FileField(
+        verbose_name=_("file"),
+        upload_to=chat_file_upload_path,
+        null=True,
+        blank=True,
+    )
+    is_read = models.BooleanField(
+        verbose_name=_("is read"),
+        default=False,
+        db_index=True,
+    )
+    created_at = models.DateTimeField(
+        verbose_name=_("created at"),
+        auto_now_add=True,
+    )
+
+    def __str__(self):
+        return f"#{self.pk} — {self.sender}"
+
+    @classmethod
+    def _baker(cls):
+        return baker.make(cls)
+
+    class Meta:
+        db_table = "ChatMessage"
+        verbose_name = _("Chat Xabar")
+        verbose_name_plural = _("Chat Xabarlar")
+        ordering = ["created_at"]
+        indexes = [
+            models.Index(
+                fields=["room_id", "created_at"],
+                name="chat_room_date_idx",
+            ),
+            models.Index(
+                fields=["room_id", "is_read"],
+                name="chat_room_read_idx",
+            ),
+        ]

core/apps/chat/permissions/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/permissions/chat.py

@@ -0,0 +1,23 @@
+from rest_framework import permissions
+
+
+class ChatmessagePermission(permissions.BasePermission):
+
+    def __init__(self) -> None: ...
+
+    def __call__(self, *args, **kwargs):
+        return self
+
+    def has_permission(self, request, view):
+        return True
+
+
+class ChatroomPermission(permissions.BasePermission):
+
+    def __init__(self) -> None: ...
+
+    def __call__(self, *args, **kwargs):
+        return self
+
+    def has_permission(self, request, view):
+        return True

core/apps/chat/serializers/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/serializers/chat/ChatMessage.py

@@ -0,0 +1,83 @@
+from rest_framework import serializers
+
+from core.apps.chat.models import ChatmessageModel
+from core.apps.chat.tasks.message import send_message_to_chat
+
+class BaseChatmessageSerializer(serializers.ModelSerializer):
+    sender = serializers.SerializerMethodField()
+    file_url = serializers.SerializerMethodField()
+
+    def get_sender(self, obj):
+        if obj.sender is None:
+            return None
+        full_name = obj.sender.get_full_name().strip()
+        if not full_name:
+            full_name = str(obj.sender.phone)
+        request = self.context.get("request")
+        return {
+            "id": obj.sender.id,
+            "full_name": full_name,
+            "role": obj.sender.role,
+            "phone": obj.sender.phone,
+            "avatar": request.build_absolute_uri(obj.sender.avatar.url) if obj.sender.avatar else None,
+        }
+
+    def get_file_url(self, obj):
+        if not obj.file:
+            return None
+        request = self.context.get("request")
+        if request:
+            return request.build_absolute_uri(obj.file.url)
+        return obj.file.url
+
+    class Meta:
+        model = ChatmessageModel
+        fields = [
+            "id",
+            "room",
+            "sender",
+            "message_type",
+            "text",
+            "file_url",
+            "is_read",
+            "created_at",
+        ]
+
+
+class ListChatmessageSerializer(BaseChatmessageSerializer):
+    class Meta(BaseChatmessageSerializer.Meta): ...
+
+
+class RetrieveChatmessageSerializer(BaseChatmessageSerializer):
+    class Meta(BaseChatmessageSerializer.Meta): ...
+
+
+class CreateChatmessageSerializer(serializers.ModelSerializer):
+    class Meta:
+        model = ChatmessageModel
+        fields = [
+            "room",
+            "message_type",
+            "text",
+            "file",
+        ]
+
+    def validate(self, attrs):
+        message_type = attrs.get("message_type", "text")
+        text = attrs.get("text", "").strip() if attrs.get("text") else ""
+        file = attrs.get("file")
+
+        if message_type == "text" and not text:
+            raise serializers.ValidationError({"text": "Matn xabari uchun text majburiy."})
+        if message_type != "text" and not file:
+            raise serializers.ValidationError({"file": f"{message_type} xabari uchun fayl majburiy."})
+        return attrs
+
+    def create(self, validated_data):
+        validated_data["sender"] = self.context["request"].user
+        request = self.context["request"]
+        message = super().create(validated_data)
+        file_url = request.build_absolute_uri(message.file.url) if message.file else None
+        avatar_url = request.build_absolute_uri(self.context['request'].user.avatar.url) if self.context['request'].user.avatar else None
+        send_message_to_chat.delay(message.id, file_url, avatar_url)
+        return message

core/apps/chat/serializers/chat/ChatRoom.py

@@ -0,0 +1,68 @@
+from rest_framework import serializers
+
+from core.apps.chat.models import ChatroomModel
+
+
+class MemberSerializer(serializers.Serializer):
+    id = serializers.IntegerField()
+    full_name = serializers.SerializerMethodField()
+    role = serializers.CharField()
+
+    def get_full_name(self, obj):
+        name = obj.get_full_name().strip()
+        return name if name else str(obj.phone)
+
+
+class BaseChatroomSerializer(serializers.ModelSerializer):
+    members = serializers.SerializerMethodField()
+
+    def get_members(self, obj):
+        return [
+            {
+                "id": u.id,
+                "full_name": (u.get_full_name().strip() or str(u.phone)),
+                "role": u.role,
+            }
+            for u in obj.members.only("id", "first_name", "last_name", "phone", "role")
+        ]
+
+    class Meta:
+        model = ChatroomModel
+        fields = [
+            "id",
+            "type",
+            "auto_evaluation",
+            "members",
+            "created_at",
+        ]
+
+
+class ListChatroomSerializer(BaseChatroomSerializer):
+    class Meta(BaseChatroomSerializer.Meta): ...
+
+
+class RetrieveChatroomSerializer(BaseChatroomSerializer):
+    class Meta(BaseChatroomSerializer.Meta): ...
+
+
+class CreateChatroomSerializer(serializers.ModelSerializer):
+    type = serializers.ChoiceField(
+        choices=["auto_evaluation", "direct"],
+        required=True,
+    )
+
+    class Meta:
+        model = ChatroomModel
+        fields = [
+            "type",
+            "auto_evaluation",
+            "members",
+        ]
+
+    def validate(self, attrs):
+        room_type = attrs.get("type")
+        if room_type == "auto_evaluation" and not attrs.get("auto_evaluation"):
+            raise serializers.ValidationError(
+                {"auto_evaluation": "auto_evaluation turi uchun AutoEvaluation majburiy."}
+            )
+        return attrs

core/apps/chat/serializers/chat/__init__.py

@@ -0,0 +1,2 @@
+from .ChatMessage import *  # noqa
+from .ChatRoom import *  # noqa

core/apps/chat/signals/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/signals/chat.py

@@ -0,0 +1,55 @@
+from asgiref.sync import async_to_sync
+from channels.layers import get_channel_layer
+from django.conf import settings
+from django.db.models.signals import post_save
+from django.dispatch import receiver
+
+from core.apps.chat.models import ChatmessageModel, ChatroomModel
+
+
+# @receiver(post_save, sender=ChatmessageModel)
+# def broadcast_new_message(sender, instance, created, **kwargs):
+#     """Yangi xabar saqlanganda xonadagi barcha WS ulanishlariga yuboradi."""
+#     if not created:
+#         return
+
+#     channel_layer = get_channel_layer()
+#     if channel_layer is None:
+#         return
+
+#     sender_obj = instance.sender
+#     if sender_obj:
+#         full_name = sender_obj.get_full_name().strip() or str(sender_obj.phone)
+#         sender_data = {
+#             "id": sender_obj.id,
+#             "full_name": full_name,
+#             "role": sender_obj.role,
+#         }
+#     else:
+#         sender_data = None
+
+#     site_url = getattr(settings, "SITE_URL", "").rstrip("/")
+#     file_url = (site_url + instance.file.url) if instance.file else None
+
+#     async_to_sync(channel_layer.group_send)(
+#         f"chat_room_{instance.room_id}",
+#         {
+#             "type": "chat_message",
+#             "id": instance.id,
+#             "message_type": instance.message_type,
+#             "text": instance.text,
+#             "file_url": file_url,
+#             "sender": sender_data,
+#             "created_at": instance.created_at.isoformat(),
+#         },
+#     )
+
+
+@receiver(post_save, sender="evaluation.AutoEvaluationModel")
+def auto_create_chatroom(sender, instance, created, **kwargs):
+    """AutoEvaluation yaratilganda avtomatik chat xonasi ochiladi."""
+    if created:
+        ChatroomModel.objects.get_or_create(
+            auto_evaluation=instance,
+            defaults={"type": "auto_evaluation"},
+        )

core/apps/chat/tasks/__init__.py

@@ -0,0 +1 @@
+from .message import send_message_to_chat

core/apps/chat/tasks/message.py

@@ -0,0 +1,44 @@
+from asgiref.sync import async_to_sync
+from channels.layers import get_channel_layer
+
+from celery import shared_task
+
+from core.apps.chat.models import ChatmessageModel
+
+
+@shared_task
+def send_message_to_chat(message_id, file_url, avatar_url):
+    try:
+        message = ChatmessageModel.objects.get(id=message_id)
+    except ChatmessageModel.DoesNotExist:
+        return "Not found"
+
+    channel_layer = get_channel_layer()
+    if channel_layer is None:
+        return
+
+    sender_obj = message.sender
+    if sender_obj:
+        full_name = sender_obj.get_full_name().strip() or str(sender_obj.phone)
+        sender_data = {
+            "id": sender_obj.id,
+            "full_name": full_name,
+            "role": sender_obj.role,
+            "phone": sender_obj.phone,
+            "avatar": avatar_url,
+        }
+    else:
+        sender_data = None
+
+    async_to_sync(channel_layer.group_send)(
+        f"chat_room_{message.room_id}",
+        {
+            "type": "chat_message",
+            "id": message.id,
+            "message_type": message.message_type,
+            "text": message.text,
+            "file_url": file_url,
+            "sender": sender_data,
+            "created_at": message.created_at.isoformat(),
+        },
+    )

core/apps/chat/tests/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/tests/chat/__init__.py

@@ -0,0 +1,2 @@
+from .test_ChatMessage import *  # noqa
+from .test_ChatRoom import *  # noqa

core/apps/chat/tests/chat/test_ChatMessage.py

@@ -0,0 +1,112 @@
+import pytest
+from django.urls import reverse
+from rest_framework.test import APIClient
+
+from core.apps.chat.models import ChatmessageModel
+
+
+@pytest.fixture
+def instance(db):
+    return ChatmessageModel._baker()
+
+
+@pytest.fixture
+def api_client(instance):
+    from model_bakery import baker
+    user = instance.sender or baker.make("accounts.User")
+    if not instance.sender:
+        instance.sender = user
+        instance.save()
+    
+    # ensure the sender is a member of the room (just in case)
+    if instance.room:
+        instance.room.members.add(user)
+    
+    client = APIClient()
+    client.force_authenticate(user=user)
+    return client, instance
+
+
+
+@pytest.fixture
+def data(api_client):
+    client, instance = api_client
+    return (
+        {
+            "list": reverse("chat-messages-list"),
+            "retrieve": reverse("chat-messages-detail", kwargs={"pk": instance.pk}),
+            "retrieve-not-found": reverse("chat-messages-detail", kwargs={"pk": 1000}),
+        },
+        client,
+        instance,
+    )
+
+
+@pytest.mark.django_db
+def test_list(data):
+    urls, client, _ = data
+    response = client.get(urls["list"])
+    data_resp = response.json()
+    assert response.status_code == 200
+    assert data_resp["status"] is True
+
+
+@pytest.mark.django_db
+def test_retrieve(data):
+    urls, client, _ = data
+    response = client.get(urls["retrieve"])
+    data_resp = response.json()
+    assert response.status_code == 200
+    assert data_resp["status"] is True
+
+
+@pytest.mark.django_db
+def test_retrieve_not_found(data):
+    urls, client, _ = data
+    response = client.get(urls["retrieve-not-found"])
+    data_resp = response.json()
+    assert response.status_code == 404
+    assert data_resp["status"] is False
+
+
+# @pytest.mark.django_db
+# def test_create(data):
+#    urls, client, _ = data
+#    response = client.post(urls["list"], data={"name": "test"})
+#    assert response.json()["status"] is True
+#    assert response.status_code == 201
+
+
+# @pytest.mark.django_db
+# def test_update(data):
+#    urls, client, _ = data
+#    response = client.patch(urls["retrieve"], data={"name": "updated"})
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#
+#    # verify updated value
+#    response = client.get(urls["retrieve"])
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#    assert response.json()["data"]["name"] == "updated"
+
+
+# @pytest.mark.django_db
+# def test_partial_update():
+#    urls, client, _ = data
+#    response = client.patch(urls["retrieve"], data={"name": "updated"})
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#
+#    # verify updated value
+#    response = client.get(urls["retrieve"])
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#    assert response.json()["data"]["name"] == "updated"
+
+
+# @pytest.mark.django_db
+# def test_destroy(data):
+#    urls, client, _ = data
+#    response = client.delete(urls["retrieve"])
+#    assert response.status_code == 204

core/apps/chat/tests/chat/test_ChatRoom.py

@@ -0,0 +1,105 @@
+import pytest
+from django.urls import reverse
+from rest_framework.test import APIClient
+
+from core.apps.chat.models import ChatroomModel
+
+
+@pytest.fixture
+def instance(db):
+    return ChatroomModel._baker()
+
+
+@pytest.fixture
+def api_client(instance):
+    from model_bakery import baker
+    user = baker.make("accounts.User")
+    instance.members.add(user)
+    client = APIClient()
+    client.force_authenticate(user=user)
+    return client, instance
+
+
+
+@pytest.fixture
+def data(api_client):
+    client, instance = api_client
+    return (
+        {
+            "list": reverse("chat-rooms-list"),
+            "retrieve": reverse("chat-rooms-detail", kwargs={"pk": instance.pk}),
+            "retrieve-not-found": reverse("chat-rooms-detail", kwargs={"pk": 1000}),
+        },
+        client,
+        instance,
+    )
+
+
+@pytest.mark.django_db
+def test_list(data):
+    urls, client, _ = data
+    response = client.get(urls["list"])
+    data_resp = response.json()
+    assert response.status_code == 200
+    assert data_resp["status"] is True
+
+
+@pytest.mark.django_db
+def test_retrieve(data):
+    urls, client, _ = data
+    response = client.get(urls["retrieve"])
+    data_resp = response.json()
+    assert response.status_code == 200
+    assert data_resp["status"] is True
+
+
+@pytest.mark.django_db
+def test_retrieve_not_found(data):
+    urls, client, _ = data
+    response = client.get(urls["retrieve-not-found"])
+    data_resp = response.json()
+    assert response.status_code == 404
+    assert data_resp["status"] is False
+
+
+# @pytest.mark.django_db
+# def test_create(data):
+#    urls, client, _ = data
+#    response = client.post(urls["list"], data={"name": "test"})
+#    assert response.json()["status"] is True
+#    assert response.status_code == 201
+
+
+# @pytest.mark.django_db
+# def test_update(data):
+#    urls, client, _ = data
+#    response = client.patch(urls["retrieve"], data={"name": "updated"})
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#
+#    # verify updated value
+#    response = client.get(urls["retrieve"])
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#    assert response.json()["data"]["name"] == "updated"
+
+
+# @pytest.mark.django_db
+# def test_partial_update():
+#    urls, client, _ = data
+#    response = client.patch(urls["retrieve"], data={"name": "updated"})
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#
+#    # verify updated value
+#    response = client.get(urls["retrieve"])
+#    assert response.json()["status"] is True
+#    assert response.status_code == 200
+#    assert response.json()["data"]["name"] == "updated"
+
+
+# @pytest.mark.django_db
+# def test_destroy(data):
+#    urls, client, _ = data
+#    response = client.delete(urls["retrieve"])
+#    assert response.status_code == 204

core/apps/chat/translation/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/translation/chat.py

@@ -0,0 +1,13 @@
+from modeltranslation.translator import TranslationOptions, register
+
+from core.apps.chat.models import ChatmessageModel, ChatroomModel
+
+
+@register(ChatmessageModel)
+class ChatmessageTranslation(TranslationOptions):
+    fields = []
+
+
+@register(ChatroomModel)
+class ChatroomTranslation(TranslationOptions):
+    fields = []

core/apps/chat/urls.py

@@ -0,0 +1,9 @@
+from django.urls import include, path
+from rest_framework.routers import DefaultRouter
+
+from .views import ChatmessageView, ChatRoomView
+
+router = DefaultRouter()
+router.register("rooms", ChatRoomView, basename="chat-rooms")
+router.register("messages", ChatmessageView, basename="chat-messages")
+urlpatterns = [path("", include(router.urls))]

core/apps/chat/validators/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/validators/chat.py

@@ -0,0 +1,15 @@
+# from django.core.exceptions import ValidationError
+
+
+class ChatmessageValidator:
+    def __init__(self): ...
+
+    def __call__(self):
+        return True
+
+
+class ChatroomValidator:
+    def __init__(self): ...
+
+    def __call__(self):
+        return True

core/apps/chat/views/__init__.py

@@ -0,0 +1 @@
+from .chat import *  # noqa

core/apps/chat/views/chat.py

@@ -0,0 +1,172 @@
+from django_core.mixins import BaseViewSetMixin
+from django_filters.rest_framework import DjangoFilterBackend
+from drf_spectacular.utils import OpenApiParameter, extend_schema
+from rest_framework.decorators import action
+from rest_framework.filters import OrderingFilter
+from rest_framework.permissions import IsAuthenticated
+from rest_framework.response import Response
+from rest_framework.viewsets import ModelViewSet
+
+from core.apps.chat.filters.chat import ChatmessageFilter, ChatroomFilter
+from core.apps.chat.models import ChatmessageModel, ChatroomModel
+from core.apps.chat.serializers.chat import (
+    CreateChatmessageSerializer,
+    CreateChatroomSerializer,
+    ListChatmessageSerializer,
+    ListChatroomSerializer,
+    RetrieveChatmessageSerializer,
+    RetrieveChatroomSerializer,
+)
+
+
+@extend_schema(
+    tags=["Chat"],
+    parameters=[
+        OpenApiParameter("room", int, description="Xona ID bo'yicha filter"),
+        OpenApiParameter("message_type", str, description="Xabar turi: text, image, video, voice, file"),
+        OpenApiParameter("is_read", bool, description="O'qilgan/o'qilmagan"),
+        OpenApiParameter("created_from", str, description="Boshlanish sanasi (ISO 8601)"),
+        OpenApiParameter("created_to", str, description="Tugash sanasi (ISO 8601)"),
+    ],
+)
+class ChatmessageView(BaseViewSetMixin, ModelViewSet):
+    permission_classes = [IsAuthenticated]
+    parser_classes_for_create = None  # multipart + json qo'llab-quvvatlanadi
+
+    filter_backends = [DjangoFilterBackend, OrderingFilter]
+    filterset_class = ChatmessageFilter
+    ordering_fields = ["created_at"]
+    ordering = ["created_at"]
+    pagination_class = None
+
+    action_permission_classes = {}
+    action_serializer_class = {
+        "list": ListChatmessageSerializer,
+        "retrieve": RetrieveChatmessageSerializer,
+        "create": CreateChatmessageSerializer,
+    }
+
+    def get_serializer_class(self):
+        return self.action_serializer_class.get(self.action, ListChatmessageSerializer)
+
+    def get_queryset(self):
+        return (
+            ChatmessageModel.objects.select_related("sender")
+            .only(
+                "id",
+                "room_id",
+                "message_type",
+                "text",
+                "file",
+                "is_read",
+                "created_at",
+                "sender__id",
+                "sender__first_name",
+                "sender__last_name",
+                "sender__phone",
+                "sender__role",
+            )
+        )
+
+    def list(self, request, *args, **kwargs):
+        queryset = self.filter_queryset(self.get_queryset())
+        results = list(queryset)
+        serializer = self.get_serializer(results, many=True)
+        return Response(
+            {
+                "count": len(results),
+                "next": None,
+                "previous": None,
+                "results": serializer.data,
+            }
+        )
+
+    @extend_schema(description="Xabarlarni o'qilgan deb belgilash")
+    @action(detail=False, methods=["post"], url_path="mark-read")
+    def mark_read(self, request):
+        """
+        Berilgan xona uchun barcha o'qilmagan xabarlarni o'qilgan qiladi.
+        Body: { "room": <id> }
+        """
+        room_id = request.data.get("room")
+        if not room_id:
+            return Response({"detail": "room majburiy."}, status=400)
+
+        updated = (
+            ChatmessageModel.objects.filter(room_id=room_id, is_read=False)
+            .exclude(sender=request.user)
+            .update(is_read=True)
+        )
+        return Response({"updated": updated})
+
+
+@extend_schema(
+    tags=["ChatRoom"],
+    parameters=[
+        OpenApiParameter("type", str, description="Xona turi: auto_evaluation, direct"),
+        OpenApiParameter("auto_evaluation", int, description="AutoEvaluation ID"),
+    ],
+)
+class ChatRoomView(BaseViewSetMixin, ModelViewSet):
+    permission_classes = [IsAuthenticated]
+
+    filter_backends = [DjangoFilterBackend]
+    filterset_class = ChatroomFilter
+    pagination_class = None
+
+    action_permission_classes = {}
+    action_serializer_class = {
+        "list": ListChatroomSerializer,
+        "retrieve": RetrieveChatroomSerializer,
+        "create": CreateChatroomSerializer,
+    }
+
+    def get_serializer_class(self):
+        return self.action_serializer_class.get(self.action, ListChatroomSerializer)
+
+    def get_queryset(self):
+        return ChatroomModel.objects.prefetch_related("members").only(
+            "id",
+            "type",
+            "auto_evaluation_id",
+            "created_at",
+        )
+
+    def list(self, request, *args, **kwargs):
+        queryset = self.filter_queryset(self.get_queryset())
+        results = list(queryset)
+        serializer = self.get_serializer(results, many=True)
+        return Response(
+            {
+                "count": len(results),
+                "next": None,
+                "previous": None,
+                "results": serializer.data,
+            }
+        )
+
+    @extend_schema(
+        description="Xonaga yangi a'zo qo'shish",
+        request={"application/json": {"type": "object", "properties": {"user_id": {"type": "integer"}}}},
+    )
+    @action(detail=True, methods=["post"], url_path="add-member")
+    def add_member(self, request, pk=None):
+        room = self.get_object()
+        user_id = request.data.get("user_id")
+        if not user_id:
+            return Response({"detail": "user_id majburiy."}, status=400)
+        room.members.add(user_id)
+        return Response({"detail": "A'zo qo'shildi."})
+
+    @extend_schema(
+        description="Xonadan a'zoni chiqarish",
+        request={"application/json": {"type": "object", "properties": {"user_id": {"type": "integer"}}}},
+    )
+    @action(detail=True, methods=["post"], url_path="remove-member")
+    def remove_member(self, request, pk=None):
+        room = self.get_object()
+        user_id = request.data.get("user_id")
+        if not user_id:
+            return Response({"detail": "user_id majburiy."}, status=400)
+        room.members.remove(user_id)
+        return Response({"detail": "A'zo chiqarildi."})

core/apps/evaluation/admin/__init__.py

@@ -1,6 +1,8 @@
 from .auto import *  # noqa
 from .customer import *  # noqa
 from .document import *  # noqa
+from .documentcategory import *  # noqa
+from .history import *  # noqa
 from .movable import *  # noqa
 from .quick import *  # noqa
 from .real_estate import *  # noqa

core/apps/evaluation/admin/auto.py

@@ -50,15 +50,8 @@ class AutoEvaluationAdmin(ModelAdmin):
                 ("value_determined", "rate_type"),
             ),
         }),
-        ("Step 3 — Manzil ma'lumotlari", {
-            "fields": (
-                ("object_location_province", "object_location_district"),
-                ("object_location_city", "object_location_neighborhood"),
-                ("object_location_street", "object_location_home"),
-                ("object_location_highways", "object_location_covenience"),
-            ),
-        }),
-        ("Step 4 — Avtomobil ma'lumotlari", {
+
+        ("Step 3 — Avtomobil ma'lumotlari", {
             "fields": (
                 "tex_passport_serie_num",
                 ("tex_passport_gived_date", "tex_passport_gived_location"),

core/apps/evaluation/admin/document.py

@@ -1,7 +1,7 @@
 from django.contrib import admin
 from unfold.admin import ModelAdmin
 
-from core.apps.evaluation.models import ValuationDocumentModel
+from core.apps.evaluation.models import DocumentModel, ValuationDocumentModel
 
 
 @admin.register(ValuationDocumentModel)
@@ -23,20 +23,37 @@ class ValuationDocumentAdmin(ModelAdmin):
     readonly_fields = ("created_at", "updated_at")
     autocomplete_fields = ("valuation", "uploaded_by")
     fieldsets = (
-        ("Hujjat", {
-            "fields": (
-                "valuation",
-                "document_type",
-                "title",
-                "file",
-                "uploaded_by",
-            ),
-        }),
-        ("Qo'shimcha", {
-            "fields": ("description",),
-        }),
-        ("Tizim", {
-            "classes": ("collapse",),
-            "fields": ("created_at", "updated_at"),
-        }),
+        (
+            "Hujjat",
+            {
+                "fields": (
+                    "valuation",
+                    "document_type",
+                    "title",
+                    "file",
+                    "uploaded_by",
+                ),
+            },
+        ),
+        (
+            "Qo'shimcha",
+            {
+                "fields": ("description",),
+            },
+        ),
+        (
+            "Tizim",
+            {
+                "classes": ("collapse",),
+                "fields": ("created_at", "updated_at"),
+            },
+        ),
+    )
+
+
+@admin.register(DocumentModel)
+class DocumentAdmin(ModelAdmin):
+    list_display = (
+        "id",
+        "__str__",
     )

core/apps/evaluation/admin/documentcategory.py

@@ -0,0 +1,57 @@
+from django.contrib import admin
+from unfold.admin import ModelAdmin
+
+from core.apps.evaluation.models import DocumentcategoryModel
+
+
+@admin.register(DocumentcategoryModel)
+class DocumentcategoryAdmin(ModelAdmin):
+    list_display = (
+        "id",
+        "label",
+        "value",
+        "created_at",
+        "updated_at"
+    )
+    search_fields = (
+        "label",
+        "value",
+    )
+    list_filter = (
+        "created_at",
+        "updated_at",
+    )
+    readonly_fields = (
+        "created_at",
+        "updated_at",
+    )
+    fieldsets = (
+        (
+            ("Uzbekcha"),
+            {
+                "fields": (
+                    "label_uz",
+                    "value_uz",
+                )
+            }
+        ),
+        (
+            ("Ruscha"),
+            {
+                "fields": (
+                    "label_ru",
+                    "value_ru",
+                )
+            }
+        ),
+        (
+            ("Inglizcha"),
+            {
+                "fields": (
+                    "label_en",
+                    "value_en",
+                )
+            }
+        ),
+    )
+    list_display_links =list_display

core/apps/evaluation/admin/history.py

@@ -0,0 +1,157 @@
+from django.contrib import admin
+from django.utils.translation import gettext_lazy as _
+from unfold.admin import ModelAdmin
+
+from core.apps.evaluation.choices.history import EvaluationEventType
+from core.apps.evaluation.models import AutoevaluationhistoryModel, QuickevaluationhistoryModel
+
+
+class BaseHistoryAdmin(ModelAdmin):
+    """
+    History yozuvlari o'zgartirib bo'lmaydi — faqat o'qiladi.
+    Signallar tomonidan avtomatik yoziladi.
+    """
+
+    list_filter = (
+        "event_type",
+        "actor_role",
+        "created_at",
+    )
+    search_fields = (
+        "actor_full_name",
+        "meta",
+    )
+    ordering = ("created_at",)
+
+    def has_add_permission(self, request):
+        return False
+
+    def has_change_permission(self, request, obj=None):
+        return False
+
+    def has_delete_permission(self, request, obj=None):
+        return False
+
+
+@admin.register(AutoevaluationhistoryModel)
+class AutoevaluationhistoryAdmin(BaseHistoryAdmin):
+    list_display = (
+        "id",
+        "auto_evaluation",
+        "event_type_colored",
+        "actor_full_name",
+        "actor_role",
+        "created_at",
+    )
+    autocomplete_fields = ("auto_evaluation",)
+    readonly_fields = (
+        "auto_evaluation",
+        "event_type",
+        "actor_id",
+        "actor_full_name",
+        "actor_role",
+        "meta",
+        "created_at",
+    )
+    fieldsets = (
+        (_("Baholash"), {
+            "fields": ("auto_evaluation",),
+        }),
+        (_("Hodisa"), {
+            "fields": (
+                "event_type",
+                "meta",
+            ),
+        }),
+        (_("Kim bajargan"), {
+            "fields": (
+                "actor_id",
+                "actor_full_name",
+                "actor_role",
+            ),
+        }),
+        (_("Tizim"), {
+            "classes": ("collapse",),
+            "fields": ("created_at",),
+        }),
+    )
+
+    @admin.display(description=_("Hodisa turi"))
+    def event_type_colored(self, obj):
+        colors = {
+            EvaluationEventType.ORDER_CREATED: "#16a34a",
+            EvaluationEventType.STATUS_CHANGED: "#2563eb",
+            EvaluationEventType.EVALUATOR_ASSIGNED: "#7c3aed",
+            EvaluationEventType.DOCUMENT_UPLOADED: "#d97706",
+            EvaluationEventType.PAYMENT_MADE: "#dc2626",
+        }
+        color = colors.get(obj.event_type, "#6b7280")
+        label = obj.get_event_type_display()
+        from django.utils.html import format_html
+        return format_html(
+            '<span style="color:{}; font-weight:600;">{}</span>',
+            color,
+            label,
+        )
+
+
+@admin.register(QuickevaluationhistoryModel)
+class QuickevaluationhistoryAdmin(BaseHistoryAdmin):
+    list_display = (
+        "id",
+        "quick_evaluation",
+        "event_type_colored",
+        "actor_full_name",
+        "actor_role",
+        "created_at",
+    )
+    autocomplete_fields = ("quick_evaluation",)
+    readonly_fields = (
+        "quick_evaluation",
+        "event_type",
+        "actor_id",
+        "actor_full_name",
+        "actor_role",
+        "meta",
+        "created_at",
+    )
+    fieldsets = (
+        (_("Tezkor baholash"), {
+            "fields": ("quick_evaluation",),
+        }),
+        (_("Hodisa"), {
+            "fields": (
+                "event_type",
+                "meta",
+            ),
+        }),
+        (_("Kim bajargan"), {
+            "fields": (
+                "actor_id",
+                "actor_full_name",
+                "actor_role",
+            ),
+        }),
+        (_("Tizim"), {
+            "classes": ("collapse",),
+            "fields": ("created_at",),
+        }),
+    )
+
+    @admin.display(description=_("Hodisa turi"))
+    def event_type_colored(self, obj):
+        colors = {
+            EvaluationEventType.ORDER_CREATED: "#16a34a",
+            EvaluationEventType.STATUS_CHANGED: "#2563eb",
+            EvaluationEventType.EVALUATOR_ASSIGNED: "#7c3aed",
+            EvaluationEventType.DOCUMENT_UPLOADED: "#d97706",
+            EvaluationEventType.PAYMENT_MADE: "#dc2626",
+        }
+        color = colors.get(obj.event_type, "#6b7280")
+        label = obj.get_event_type_display()
+        from django.utils.html import format_html
+        return format_html(
+            '<span style="color:{}; font-weight:600;">{}</span>',
+            color,
+            label,
+        )

core/apps/evaluation/admin/request.py

@@ -24,7 +24,7 @@ class EvaluationrequestAdmin(ModelAdmin):
         "tex_passport",
         "user__phone",
     )
-    readonly_fields = ("user", "created_at", "updated_at")
+    readonly_fields = ("created_at", "updated_at")
     fieldsets = (
         ("Asosiy", {
             "fields": (

core/apps/evaluation/apps.py

@@ -4,3 +4,6 @@ from django.apps import AppConfig
 class ModuleConfig(AppConfig):
     default_auto_field = "django.db.models.BigAutoField"
     name = "core.apps.evaluation"
+
+    def ready(self):
+        import core.apps.evaluation.signals  # noqa

core/apps/evaluation/choices/auto.py

@@ -21,28 +21,6 @@ class ObjectOwnerType(models.IntegerChoices):
     LEGAL = 2, _("Yuridik shaxs")
 
 
-class PropertyRights(models.IntegerChoices):
-    PERMANENT_OWNERSHIP = 1, _("Doimiy egalik")
-    PERMANENT_USE = 2, _("Doimiy foydalanish")
-    TEMPORARY_USE = 3, _("Vaqtinchalik foydalanish")
-    TERM_LEASE = 4, _("Muddatli ijara")
-    LIFETIME_INHERITANCE = 5, _("Umrbod meros qilib olish")
-
-
-class FormOwnership(models.IntegerChoices):
-    PRIVATE = 1, _("Xususiy")
-    STATE = 2, _("Davlat")
-    JSC = 3, _("AJ")
-    LLC = 4, _("MCHJ")
-    OTHER = 5, _("Boshqa")
-
-
-class ValueDetermined(models.IntegerChoices):
-    MARKET_VALUE = 1, _("Bozor qiymati")
-    TAX_PURPOSE = 2, _("Soliq maqsadlari uchun")
-    LIQUIDATION_VALUE = 3, _("Tugatish qiymati")
-    UTILIZATION_VALUE = 4, _("Utilizatsiya qiymati")
-
 
 class RateType(models.IntegerChoices):
     CREDIT_COLLATERAL = 1, _("Kredit ta'minoti sifatida garovga qo'yish")

core/apps/evaluation/choices/history.py

@@ -0,0 +1,10 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+
+class EvaluationEventType(models.TextChoices):
+    ORDER_CREATED = "order_created", _("Buyurtma yaratildi")
+    STATUS_CHANGED = "status_changed", _("Status o'zgartirildi")
+    EVALUATOR_ASSIGNED = "evaluator_assigned", _("Baholovchi biriktirildi")
+    DOCUMENT_UPLOADED = "document_uploaded", _("Hujjat yuklandi")
+    PAYMENT_MADE = "payment_made", _("To'lov qilindi")

core/apps/evaluation/choices/reference.py

@@ -10,3 +10,7 @@ class ReferenceType(models.TextChoices):
     BODY_TYPE = "body_type", _("Body type")
     CAR_POSITION = "car_position", _("Car position")
     STATE_CAR = "state_car", _("Car state")
+    EVALUATION_PURPOSE = "evaluation_purpose", _("Evaluation purpose")
+    DETERMINED_VALUE = "determined_value", _("Determined value type")
+    PROPERTY_RIGHTS = "property_rights", _("Property rights")
+    OWNERSHIP_FORM = "ownership_form", _("Ownership form")

core/apps/evaluation/choices/request.py

@@ -19,3 +19,8 @@ class RequestStatus(models.TextChoices):
     IN_PROGRESS = "in_progress", _("Jarayonda")
     COMPLETED = "completed", _("Bajarildi")
     REJECTED = "rejected", _("Rad etildi")
+
+
+class RequestPersonType(models.TextChoices):
+    INDIVIDUAL_PERSON = "individual_person", "Jismoniy shaxs"
+    LEGAL_PERSON = "legal_person", 'Yuridik shaxs',

core/apps/evaluation/filters/__init__.py

@@ -1,6 +1,8 @@
 from .auto import *  # noqa
 from .customer import *  # noqa
 from .document import *  # noqa
+from .documentcategory import *  # noqa
+from .history import *  # noqa
 from .movable import *  # noqa
 from .quick import *  # noqa
 from .real_estate import *  # noqa

core/apps/evaluation/filters/document.py

@@ -1,11 +1,18 @@
 from django_filters import rest_framework as filters
 
-from core.apps.evaluation.models import ValuationDocumentModel
+from core.apps.evaluation.models import DocumentModel, ValuationDocumentModel
 
 
 class ValuationdocumentFilter(filters.FilterSet):
-    # name = filters.CharFilter(field_name="name", lookup_expr="icontains")
 
     class Meta:
         model = ValuationDocumentModel
         fields = []
+
+
+class DocumentFilter(filters.FilterSet):
+
+    class Meta:
+        model = DocumentModel
+        fields = [
+        ]

core/apps/evaluation/filters/documentcategory.py

@@ -0,0 +1,10 @@
+from django_filters import rest_framework as filters
+
+from core.apps.evaluation.models import DocumentcategoryModel
+
+
+class DocumentcategoryFilter(filters.FilterSet):
+    class Meta:
+        model = DocumentcategoryModel
+        fields = [
+        ]

core/apps/evaluation/filters/history.py

@@ -0,0 +1,54 @@
+from django_filters import rest_framework as filters
+
+from core.apps.evaluation.choices.history import EvaluationEventType
+from core.apps.evaluation.models import AutoevaluationhistoryModel, QuickevaluationhistoryModel
+
+
+class AutoevaluationhistoryFilter(filters.FilterSet):
+    auto_evaluation = filters.NumberFilter(
+        field_name="auto_evaluation", lookup_expr="exact"
+    )
+    event_type = filters.ChoiceFilter(
+        field_name="event_type",
+        choices=EvaluationEventType.choices,
+    )
+    created_from = filters.DateTimeFilter(
+        field_name="created_at", lookup_expr="gte"
+    )
+    created_to = filters.DateTimeFilter(
+        field_name="created_at", lookup_expr="lte"
+    )
+
+    class Meta:
+        model = AutoevaluationhistoryModel
+        fields = [
+            "auto_evaluation",
+            "event_type",
+            "created_from",
+            "created_to",
+        ]
+
+
+class QuickevaluationhistoryFilter(filters.FilterSet):
+    quick_evaluation = filters.NumberFilter(
+        field_name="quick_evaluation", lookup_expr="exact"
+    )
+    event_type = filters.ChoiceFilter(
+        field_name="event_type",
+        choices=EvaluationEventType.choices,
+    )
+    created_from = filters.DateTimeFilter(
+        field_name="created_at", lookup_expr="gte"
+    )
+    created_to = filters.DateTimeFilter(
+        field_name="created_at", lookup_expr="lte"
+    )
+
+    class Meta:
+        model = QuickevaluationhistoryModel
+        fields = [
+            "quick_evaluation",
+            "event_type",
+            "created_from",
+            "created_to",
+        ]

core/apps/evaluation/forms/__init__.py

@@ -1,6 +1,8 @@
 from .auto import *  # noqa
 from .customer import *  # noqa
 from .document import *  # noqa
+from .documentcategory import *  # noqa
+from .history import *  # noqa
 from .movable import *  # noqa
 from .quick import *  # noqa
 from .real_estate import *  # noqa

core/apps/evaluation/forms/document.py

@@ -1,6 +1,6 @@
 from django import forms
 
-from core.apps.evaluation.models import ValuationDocumentModel
+from core.apps.evaluation.models import DocumentModel, ValuationDocumentModel
 
 
 class ValuationdocumentForm(forms.ModelForm):
@@ -8,3 +8,10 @@ class ValuationdocumentForm(forms.ModelForm):
     class Meta:
         model = ValuationDocumentModel
         fields = "__all__"
+
+
+class DocumentForm(forms.ModelForm):
+
+    class Meta:
+        model = DocumentModel
+        fields = "__all__"

core/apps/evaluation/forms/documentcategory.py

@@ -0,0 +1,10 @@
+from django import forms
+
+from core.apps.evaluation.models import DocumentcategoryModel
+
+
+class DocumentcategoryForm(forms.ModelForm):
+
+    class Meta:
+        model = DocumentcategoryModel
+        fields = "__all__"

core/apps/evaluation/forms/history.py

@@ -0,0 +1,17 @@
+from django import forms
+
+from core.apps.evaluation.models import AutoevaluationhistoryModel, QuickevaluationhistoryModel
+
+
+class AutoevaluationhistoryForm(forms.ModelForm):
+
+    class Meta:
+        model = AutoevaluationhistoryModel
+        fields = "__all__"
+
+
+class QuickevaluationhistoryForm(forms.ModelForm):
+
+    class Meta:
+        model = QuickevaluationhistoryModel
+        fields = "__all__"

core/apps/evaluation/migrations/0019_evaluationrequestmodel_location_name_and_more.py

@@ -0,0 +1,23 @@
+# Generated by Django 5.2.7 on 2026-03-17 13:34
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0018_evaluationrequestmodel'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='evaluationrequestmodel',
+            name='location_name',
+            field=models.CharField(blank=True, max_length=255, null=True, verbose_name='location name'),
+        ),
+        migrations.AlterField(
+            model_name='evaluationrequestmodel',
+            name='chassi',
+            field=models.CharField(blank=True, max_length=100, null=True, verbose_name='chassi'),
+        ),
+    ]

core/apps/evaluation/migrations/0020_alter_referenceitemmodel_type.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.7 on 2026-03-17 14:22
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0019_evaluationrequestmodel_location_name_and_more'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='referenceitemmodel',
+            name='type',
+            field=models.CharField(choices=[('brand', 'Brand'), ('marka', 'Marka'), ('color', 'Color'), ('fuel_type', 'Fuel type'), ('body_type', 'Body type'), ('car_position', 'Car position'), ('state_car', 'Car state'), ('evaluation_purpose', 'Evaluation purpose')], max_length=50, verbose_name='type'),
+        ),
+    ]

core/apps/evaluation/migrations/0021_alter_referenceitemmodel_type.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.7 on 2026-03-17 15:14
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0020_alter_referenceitemmodel_type'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='referenceitemmodel',
+            name='type',
+            field=models.CharField(choices=[('brand', 'Brand'), ('marka', 'Marka'), ('color', 'Color'), ('fuel_type', 'Fuel type'), ('body_type', 'Body type'), ('car_position', 'Car position'), ('state_car', 'Car state'), ('evaluation_purpose', 'Evaluation purpose'), ('determined_value', 'Determined value type')], max_length=50, verbose_name='type'),
+        ),
+    ]

core/apps/evaluation/migrations/0022_alter_referenceitemmodel_type.py

@@ -0,0 +1,18 @@
+# Generated by Django 5.2.7 on 2026-03-18 08:20
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0021_alter_referenceitemmodel_type'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='referenceitemmodel',
+            name='type',
+            field=models.CharField(choices=[('brand', 'Brand'), ('marka', 'Marka'), ('color', 'Color'), ('fuel_type', 'Fuel type'), ('body_type', 'Body type'), ('car_position', 'Car position'), ('state_car', 'Car state'), ('evaluation_purpose', 'Evaluation purpose'), ('determined_value', 'Determined value type'), ('property_rights', 'Property rights'), ('ownership_form', 'Ownership form')], max_length=50, verbose_name='type'),
+        ),
+    ]

core/apps/evaluation/migrations/0023_autoevaluationhistorymodel_and_more.py

@@ -0,0 +1,52 @@
+# Generated by Django 5.2.7 on 2026-04-02 10:03
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0022_alter_referenceitemmodel_type'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='AutoevaluationhistoryModel',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('event_type', models.CharField(choices=[('order_created', 'Buyurtma yaratildi'), ('status_changed', "Status o'zgartirildi"), ('evaluator_assigned', 'Baholovchi biriktirildi'), ('document_uploaded', 'Hujjat yuklandi'), ('payment_made', "To'lov qilindi")], max_length=50, verbose_name='event type')),
+                ('actor_id', models.BigIntegerField(blank=True, null=True, verbose_name='actor id')),
+                ('actor_full_name', models.CharField(default='Tizim', max_length=255, verbose_name='actor full name')),
+                ('actor_role', models.CharField(default='system', max_length=50, verbose_name='actor role')),
+                ('meta', models.JSONField(blank=True, default=dict, verbose_name='meta')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='created at')),
+                ('auto_evaluation', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='history', to='evaluation.autoevaluationmodel', verbose_name='auto evaluation')),
+            ],
+            options={
+                'verbose_name': 'Auto Evaluation History',
+                'verbose_name_plural': 'Auto Evaluation Histories',
+                'db_table': 'AutoEvaluationHistory',
+                'ordering': ['created_at'],
+            },
+        ),
+        migrations.CreateModel(
+            name='QuickevaluationhistoryModel',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('event_type', models.CharField(choices=[('order_created', 'Buyurtma yaratildi'), ('status_changed', "Status o'zgartirildi"), ('evaluator_assigned', 'Baholovchi biriktirildi'), ('document_uploaded', 'Hujjat yuklandi'), ('payment_made', "To'lov qilindi")], max_length=50, verbose_name='event type')),
+                ('actor_id', models.BigIntegerField(blank=True, null=True, verbose_name='actor id')),
+                ('actor_full_name', models.CharField(default='Tizim', max_length=255, verbose_name='actor full name')),
+                ('actor_role', models.CharField(default='system', max_length=50, verbose_name='actor role')),
+                ('meta', models.JSONField(blank=True, default=dict, verbose_name='meta')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='created at')),
+                ('quick_evaluation', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='history', to='evaluation.quickevaluationmodel', verbose_name='quick evaluation')),
+            ],
+            options={
+                'verbose_name': 'Quick Evaluation History',
+                'verbose_name_plural': 'Quick Evaluation Histories',
+                'db_table': 'QuickEvaluationHistory',
+                'ordering': ['created_at'],
+            },
+        ),
+    ]

core/apps/evaluation/migrations/0024_add_history_indexes.py

@@ -0,0 +1,29 @@
+# Generated by Django 5.2.7 on 2026-04-02 11:08
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0023_autoevaluationhistorymodel_and_more'),
+    ]
+
+    operations = [
+        migrations.AddIndex(
+            model_name='autoevaluationhistorymodel',
+            index=models.Index(fields=['auto_evaluation_id', 'created_at'], name='auto_hist_eval_date_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='autoevaluationhistorymodel',
+            index=models.Index(fields=['event_type'], name='auto_hist_event_type_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='quickevaluationhistorymodel',
+            index=models.Index(fields=['quick_evaluation_id', 'created_at'], name='quick_hist_eval_date_idx'),
+        ),
+        migrations.AddIndex(
+            model_name='quickevaluationhistorymodel',
+            index=models.Index(fields=['event_type'], name='quick_hist_event_type_idx'),
+        ),
+    ]

core/apps/evaluation/migrations/0025_alter_evaluationrequestmodel_form_ownership_and_more.py

@@ -0,0 +1,34 @@
+# Generated by Django 5.2.7 on 2026-04-02 12:34
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0024_add_history_indexes'),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name='evaluationrequestmodel',
+            name='form_ownership',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_form_ownership_requests', to='evaluation.referenceitemmodel', verbose_name='form ownership'),
+        ),
+        migrations.AlterField(
+            model_name='evaluationrequestmodel',
+            name='property_rights',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_property_rights_requests', to='evaluation.referenceitemmodel', verbose_name='property rights'),
+        ),
+        migrations.AlterField(
+            model_name='evaluationrequestmodel',
+            name='rate_goal',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_rate_goal_requests', to='evaluation.referenceitemmodel', verbose_name='rate goal'),
+        ),
+        migrations.AlterField(
+            model_name='evaluationrequestmodel',
+            name='value_determined',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_value_determined_requests', to='evaluation.referenceitemmodel', verbose_name='value determined'),
+        ),
+    ]

core/apps/evaluation/migrations/0026_alter_autoevaluationmodel_form_ownership_and_more.py

@@ -0,0 +1,45 @@
+# Generated by Django 5.2.7 on 2026-04-02 13:24
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0025_alter_evaluationrequestmodel_form_ownership_and_more'),
+    ]
+
+    operations = [
+        # Mavjud integer qiymatlar ReferenceItem'da yo'q — FK qo'yishdan oldin NULL qilamiz
+        migrations.RunSQL(
+            sql="""
+                UPDATE "AutoEvaluation"
+                SET form_ownership = NULL,
+                    property_rights = NULL,
+                    rate_type = NULL,
+                    value_determined = NULL;
+            """,
+            reverse_sql=migrations.RunSQL.noop,
+        ),
+        migrations.AlterField(
+            model_name='autoevaluationmodel',
+            name='form_ownership',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_auto_form_ownership', to='evaluation.referenceitemmodel', verbose_name='form of ownership'),
+        ),
+        migrations.AlterField(
+            model_name='autoevaluationmodel',
+            name='property_rights',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_auto_property_rights', to='evaluation.referenceitemmodel', verbose_name='property rights'),
+        ),
+        migrations.AlterField(
+            model_name='autoevaluationmodel',
+            name='rate_type',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_auto_rate_type', to='evaluation.referenceitemmodel', verbose_name='rate type'),
+        ),
+        migrations.AlterField(
+            model_name='autoevaluationmodel',
+            name='value_determined',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='evaluation_auto_value_determined', to='evaluation.referenceitemmodel', verbose_name='value determined'),
+        ),
+    ]

core/apps/evaluation/migrations/0027_documentcategorymodel_documentmodel.py

@@ -0,0 +1,52 @@
+# Generated by Django 5.2.7 on 2026-04-03 10:58
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0026_alter_autoevaluationmodel_form_ownership_and_more'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='DocumentcategoryModel',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('label', models.CharField(max_length=255, verbose_name='label')),
+                ('label_uz', models.CharField(max_length=255, null=True, verbose_name='label')),
+                ('label_ru', models.CharField(max_length=255, null=True, verbose_name='label')),
+                ('label_en', models.CharField(max_length=255, null=True, verbose_name='label')),
+                ('value', models.CharField(max_length=255, verbose_name='value')),
+                ('value_uz', models.CharField(max_length=255, null=True, verbose_name='value')),
+                ('value_ru', models.CharField(max_length=255, null=True, verbose_name='value')),
+                ('value_en', models.CharField(max_length=255, null=True, verbose_name='value')),
+            ],
+            options={
+                'verbose_name': 'DocumentcategoryModel',
+                'verbose_name_plural': 'DocumentcategoryModels',
+                'db_table': 'DocumentCategory',
+            },
+        ),
+        migrations.CreateModel(
+            name='DocumentModel',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('title', models.CharField(max_length=255, verbose_name='title')),
+                ('document', models.FileField(upload_to='evaluation/documents/%Y/%m/', verbose_name='document')),
+                ('auto_evaluation', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='documents', to='evaluation.autoevaluationmodel', verbose_name='auto evaluation')),
+                ('category', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='documents', to='evaluation.documentcategorymodel', verbose_name='category')),
+            ],
+            options={
+                'verbose_name': 'DocumentModel',
+                'verbose_name_plural': 'DocumentModels',
+                'db_table': 'Document',
+            },
+        ),
+    ]

core/apps/evaluation/migrations/0028_autoevaluationmodel_appraisers.py

@@ -0,0 +1,20 @@
+# Generated by Django 5.2.7 on 2026-04-03 11:51
+
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0027_documentcategorymodel_documentmodel'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='autoevaluationmodel',
+            name='appraisers',
+            field=models.ManyToManyField(blank=True, null=True, related_name='auto_evaluations', to=settings.AUTH_USER_MODEL, verbose_name='appraisers'),
+        ),
+    ]

core/apps/evaluation/migrations/0029_autoevaluationmodel_user.py

@@ -0,0 +1,21 @@
+# Generated by Django 5.2.7 on 2026-04-18 11:28
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0028_autoevaluationmodel_appraisers'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='autoevaluationmodel',
+            name='user',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='auto_evaluations_user', to=settings.AUTH_USER_MODEL, verbose_name='user'),
+        ),
+    ]

core/apps/evaluation/migrations/0030_autoevaluationmodel_evaluation_request.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.2.7 on 2026-04-20 13:08
+
+import django.db.models.deletion
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0029_autoevaluationmodel_user'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='autoevaluationmodel',
+            name='evaluation_request',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='auto_evaluations_request', to='evaluation.evaluationrequestmodel', verbose_name='evaluation request'),
+        ),
+    ]

core/apps/evaluation/migrations/0031_remove_autoevaluationmodel_object_location_city_and_more.py

@@ -0,0 +1,54 @@
+# Generated by Django 5.2.7 on 2026-04-21 10:22
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0030_autoevaluationmodel_evaluation_request'),
+    ]
+
+    operations = [
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_city',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_covenience',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_district',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_highways',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_home',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_neighborhood',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_province',
+        ),
+        migrations.RemoveField(
+            model_name='autoevaluationmodel',
+            name='object_location_street',
+        ),
+        migrations.RemoveField(
+            model_name='quickevaluationmodel',
+            name='tex_passport_file',
+        ),
+        migrations.AddField(
+            model_name='autoevaluationmodel',
+            name='tex_passport_file',
+            field=models.FileField(blank=True, null=True, upload_to='quick_evaluation/tech_passports/%Y/%m/', verbose_name='tech passport file'),
+        ),
+    ]

core/apps/evaluation/migrations/0032_certificatemodel.py

@@ -0,0 +1,28 @@
+# Generated by Django 6.0.4 on 2026-04-23 11:07
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0031_remove_autoevaluationmodel_object_location_city_and_more'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='CertificateModel',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True)),
+                ('updated_at', models.DateTimeField(auto_now=True)),
+                ('title', models.CharField(max_length=255, verbose_name='title')),
+                ('file_url', models.URLField(max_length=255, verbose_name='file url')),
+            ],
+            options={
+                'verbose_name': 'Certificate',
+                'verbose_name_plural': 'Certificates',
+                'db_table': 'certificate',
+            },
+        ),
+    ]

core/apps/evaluation/migrations/0032_evaluationrequestmodel_is_archive.py

@@ -0,0 +1,18 @@
+# Generated by Django 6.0.4 on 2026-04-23 07:22
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0031_remove_autoevaluationmodel_object_location_city_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='evaluationrequestmodel',
+            name='is_archive',
+            field=models.BooleanField(default=False, verbose_name='is archive'),
+        ),
+    ]

core/apps/evaluation/migrations/0032_quickevaluationmodel_is_archive.py

@@ -0,0 +1,18 @@
+# Generated by Django 6.0.4 on 2026-04-23 07:24
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('evaluation', '0031_remove_autoevaluationmodel_object_location_city_and_more'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='quickevaluationmodel',
+            name='is_archive',
+            field=models.BooleanField(default=False, verbose_name='is archive'),
+        ),
+    ]